Behavioral task
behavioral1
Sample
9694597ed70e0fac87a84cd19522c57cc2c1754f8bb91ae137222a08b33ac896.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9694597ed70e0fac87a84cd19522c57cc2c1754f8bb91ae137222a08b33ac896.exe
Resource
win10v2004-20220812-en
General
-
Target
9694597ed70e0fac87a84cd19522c57cc2c1754f8bb91ae137222a08b33ac896
-
Size
11.3MB
-
MD5
5195b9c04ad812e00fbe30bc0a9050b6
-
SHA1
ca9039eaecdd377cd3c2c8e2ea3de119f54289d2
-
SHA256
9694597ed70e0fac87a84cd19522c57cc2c1754f8bb91ae137222a08b33ac896
-
SHA512
b7f2c80675ec5bfcfa634e3c38b5b572c81aab36a4ec765ca7f8c17954e1a93a5a8e7c3ad5fdd91696e6f978ff607a687278b0bd442d9e3e729fed41e6c03e39
-
SSDEEP
196608:+9YBxT2x0xdIgS/mG2zKJAJ7ff0PEKIK1DYoPTp3k8E8CEMVZFCChyiGn:+9YBxTDdhcD7250Pdjtk8iEIMCQn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9694597ed70e0fac87a84cd19522c57cc2c1754f8bb91ae137222a08b33ac896.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ