Behavioral task
behavioral1
Sample
e2cf972827d31cbd6d2b895a23d5cb895cb6ffc51a21c089757297959d95180a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2cf972827d31cbd6d2b895a23d5cb895cb6ffc51a21c089757297959d95180a.exe
Resource
win10v2004-20220812-en
General
-
Target
e2cf972827d31cbd6d2b895a23d5cb895cb6ffc51a21c089757297959d95180a
-
Size
10KB
-
MD5
22129b4a33c406bdee99a0d7bd5ee38f
-
SHA1
7c7b3104a27894e4f826ad2514e180815617628d
-
SHA256
e2cf972827d31cbd6d2b895a23d5cb895cb6ffc51a21c089757297959d95180a
-
SHA512
a967465399600ecaeac8b20dcc60bf9be4d9f2a13d33e51f9f7120f8136bd29b1ba53102d72ec50179ec9153c8d073cf448b738f51a9556afa5932593e7e750b
-
SSDEEP
192:JaBMAXmOUORMxzIZG5uf1XwC7cINx1dPFGtCt:wFXmsRyRmNT7cIXPFGq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e2cf972827d31cbd6d2b895a23d5cb895cb6ffc51a21c089757297959d95180a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ