Behavioral task
behavioral1
Sample
ea4f1ab1b1b6a31626dc55863c42d11f135f298bbb914dc42a11cca5e3bc93a2.exe
Resource
win7-20230220-en
General
-
Target
553b7ccd9f9f9ac01c0942f8379ead12.bin
-
Size
583KB
-
MD5
3d932b0f5cbacd027c05ec3c4503c407
-
SHA1
c6b02116679b25df8d4a9bdd5f8d91a726c974bc
-
SHA256
2859e919175223372a9fe8a4b1cd0e73c2b6fe87291d1ca949aed631b5d25c46
-
SHA512
72c5b0261be8fd2fa779c5ad4dc2a81cbb1f137a501b9ae7ae918c752afda9369328a125188c133d4b7d08cb731c819a8a0502476e1ab2261e7e8ad35af5ce46
-
SSDEEP
12288:fjC4zkEPS4tDfBHWngD7oaVNS8L+xC7sb1ZDWeLBTgZhS6T93AX6Dmk0dcXlE:m44EPZ1fB2ngD7v3L+I+rlN43AqDmkaT
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ea4f1ab1b1b6a31626dc55863c42d11f135f298bbb914dc42a11cca5e3bc93a2.exe upx
Files
-
553b7ccd9f9f9ac01c0942f8379ead12.bin.zip
Password: infected
-
ea4f1ab1b1b6a31626dc55863c42d11f135f298bbb914dc42a11cca5e3bc93a2.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 593KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 675KB - Virtual size: 674KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ