Behavioral task
behavioral1
Sample
98880c83bfd477f130696c831a16f62fe25dc7d149fd616526175b81a7da3ed4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98880c83bfd477f130696c831a16f62fe25dc7d149fd616526175b81a7da3ed4.exe
Resource
win10v2004-20221111-en
General
-
Target
98880c83bfd477f130696c831a16f62fe25dc7d149fd616526175b81a7da3ed4
-
Size
19.0MB
-
MD5
4b7b807973fb22152573d4323015dfee
-
SHA1
40a3cf5ce9913531436c671795baf6996057699c
-
SHA256
98880c83bfd477f130696c831a16f62fe25dc7d149fd616526175b81a7da3ed4
-
SHA512
15cf27dbb3fac9051e1077bdfc9c149b0d01aee8814142f633227a58eea28f1573f81a6fe6edbbe755e5e8d08498b74ca8b9573270375a5600d0e01e0857f9c7
-
SSDEEP
393216:P0neUILy8zsW41U7ndnNnen/nhuCIkGRBotIlq6nDIglfsd:P0neUIzzGU7ndnNnen/n00GHUv6nDIgM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
98880c83bfd477f130696c831a16f62fe25dc7d149fd616526175b81a7da3ed4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 300KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ