Behavioral task
behavioral1
Sample
c6b5ffa3144e1841056b91ff4ae1e4b650d415ee9e0e94197855f1fa2c80e3ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6b5ffa3144e1841056b91ff4ae1e4b650d415ee9e0e94197855f1fa2c80e3ff.exe
Resource
win10v2004-20220812-en
General
-
Target
c6b5ffa3144e1841056b91ff4ae1e4b650d415ee9e0e94197855f1fa2c80e3ff
-
Size
54KB
-
MD5
e762b0db6a3571718349fefcf29f4ad2
-
SHA1
da6403aaba2400083cbcfcf5d08b9ce1dfdfa082
-
SHA256
c6b5ffa3144e1841056b91ff4ae1e4b650d415ee9e0e94197855f1fa2c80e3ff
-
SHA512
705793e3b82d649d395fade82fa171845254046e50ff6dcd593b3f9a08fa0715e638a15a8bedb0fe7cc2bcfc593ee22c45cab6a0ec6314df9bf22126694df609
-
SSDEEP
768:7qamkr6i5ZZQ2yftXw5e/xt45YUkjktrRWDIzb6jyzhklWTfsx1n3MuEBRkVNsI:7qa5rVYXo0ZZk7WczWjy1kIIxXJNX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6b5ffa3144e1841056b91ff4ae1e4b650d415ee9e0e94197855f1fa2c80e3ff.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ