Behavioral task
behavioral1
Sample
test.exe
Resource
win10-20220901-en
General
-
Target
test.exe
-
Size
694KB
-
MD5
35ecd508be6d38e4fd0cd2d46d81e5f1
-
SHA1
5f2f83e623151eeeb4a5fa48c2955ea5954381db
-
SHA256
cbdab55be50ead0792173582f384b6dd669314370c91560ea9e1afbd6d7e0780
-
SHA512
c522e7f5eead6707d33f798e03387c05dd26d9e206630c75934b8755c78d650c24ce72919730fc3d36e0f39a7e9141fed6216e7378661a55af30f5e3ea00354b
-
SSDEEP
12288:VmrfYF1Xa72pj9jEyB7EaETJfs9PKn23C20hQCyH1JyakM65ny466+ty0FGtwfU:Vmf+QcR+sdt3C2iQ3QbZgJ8+/Ow
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
test.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE