Behavioral task
behavioral1
Sample
9813dd609c7d1211b5ba14eaa8011d020f5639bec3fd3b22468dd4c96a7957f3.exe
Resource
win7-20220901-en
General
-
Target
9813dd609c7d1211b5ba14eaa8011d020f5639bec3fd3b22468dd4c96a7957f3
-
Size
51KB
-
MD5
2b7e4fa563b8a9b9252458ebc36359f5
-
SHA1
df8c34a08083d1b55d24a3b989f432e3b1773679
-
SHA256
9813dd609c7d1211b5ba14eaa8011d020f5639bec3fd3b22468dd4c96a7957f3
-
SHA512
d497d898a31566ae38a90bf7d38cbcd83ecb1a4ef6ab8f2b4fe84e53bb9fd0cd2dcadc859787324e7ca166998ef64eddc617fb982268d31f2325dfd35b4361ca
-
SSDEEP
1536:8Sj+UZLEvTsvoce96ZM1urFVcXZ2b5YChnJ6p:Lj+ELgT+oczZeuSE5ZI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9813dd609c7d1211b5ba14eaa8011d020f5639bec3fd3b22468dd4c96a7957f3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ