Behavioral task
behavioral1
Sample
9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd.exe
Resource
win10v2004-20220812-en
General
-
Target
9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd
-
Size
239KB
-
MD5
d6d62bf4189a827938b870d10c4b9ee1
-
SHA1
c3eac5cc9bb1a7f30c7b53e8de3c4d765cf63631
-
SHA256
9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd
-
SHA512
2a7472afaab0db5420bc9a33d8276b75df6bcc1470c4097144bd2c0a4a4da6fa66fffe025303e844387a10e03f38fae16e0d8c10418385adaaff956254a68d79
-
SSDEEP
6144:93qptRNRUc/4NkclmuanKpEaWiAOq2eJ/mQXrv:optic0Lan2sOq2eJ/t
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ