Behavioral task
behavioral1
Sample
876c3b4f21df0a4efaa58660990ad1fdad9cdbc5c0d7f5e27a250ff26f9bb505.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
876c3b4f21df0a4efaa58660990ad1fdad9cdbc5c0d7f5e27a250ff26f9bb505.exe
Resource
win10v2004-20221111-en
General
-
Target
876c3b4f21df0a4efaa58660990ad1fdad9cdbc5c0d7f5e27a250ff26f9bb505
-
Size
86KB
-
MD5
9c533cc350eedb0e423e47d351d4c8dc
-
SHA1
25aaadbbadf7e68c87d5621cfdbb5afe52b62b48
-
SHA256
876c3b4f21df0a4efaa58660990ad1fdad9cdbc5c0d7f5e27a250ff26f9bb505
-
SHA512
3e85c9b3449554cf0f49e8b0e5ae5b318b8a055e89de6cf474410a92ad0743f99ca5d647b5ad7632d4472bf585ab5a416146a4ec101b0b7482809bc27c4f1481
-
SSDEEP
1536:6JlORDsMRx3wGY4b2XJD1ozaIxRB7O0F2I7dRN8eF6fzxhKayhfIMh19NbxyNvWs:6JlOW8FY4b2Xh1exeidT8eF6LKayhLeR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
876c3b4f21df0a4efaa58660990ad1fdad9cdbc5c0d7f5e27a250ff26f9bb505.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ