Behavioral task
behavioral1
Sample
b2c85ef06bcf6a7f23a16018326705ec277fb62eb094f430175fbcec974c6674.exe
Resource
win7-20220812-en
General
-
Target
b2c85ef06bcf6a7f23a16018326705ec277fb62eb094f430175fbcec974c6674
-
Size
55KB
-
MD5
204932bf6634c0a1c03e0847b0bfbf61
-
SHA1
b46e9419fe263a6603451d271947ef78148ca70d
-
SHA256
b2c85ef06bcf6a7f23a16018326705ec277fb62eb094f430175fbcec974c6674
-
SHA512
46d063d93ab0ad1bbb8a90cd510946fc3caa041b1ce1deec7ddfe4f8218d122df2019829dfc5f467f74aabcbe0ca9dd97349afbc4e8b37e7e76ebf034fc0196d
-
SSDEEP
768:ls+8pl4r3WLw5Yn0Y2MZ41QpK6Hrh6JLpoJvhYPpTcKm2w54pkeSRo6o:K/TTk5YJ2MZ4SsJLqrYhT45MkB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b2c85ef06bcf6a7f23a16018326705ec277fb62eb094f430175fbcec974c6674.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 801B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 512B - Virtual size: 72B
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ