Behavioral task
behavioral1
Sample
nevada_dca76e86bd8839c29ba483a379244a6a7687d50b5de7b5efdcb7f2e11e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
nevada_dca76e86bd8839c29ba483a379244a6a7687d50b5de7b5efdcb7f2e11e.exe
Resource
win10v2004-20230220-en
General
-
Target
nevada_dca76e86bd8839c29ba483a379244a6a7687d50b5de7b5efdcb7f2e11e.exe
-
Size
222KB
-
MD5
b673d92b77489d12779dc1fb5e8f6fdd
-
SHA1
1921915dc4400a4aa70ca68a6ba1fd99106a336f
-
SHA256
dca76e86bd8839c29ba483a379244a6a7687d50b5de7b5efdcb7f2e11ed77fe2
-
SHA512
1cd37bd4fcfd2e4831581693b682e06b14f36cb70792b52981c02298a98c48123a081b6e9982e213ab2e5351e67316fb57f7875f0b14fbb9b6893608f8990586
-
SSDEEP
3072:XaHn1MJEfNAkymp9beRx67/Ecp5nEjbv6osJouVwNe6x3hekpeacjkLnVVMBDyyV:qH1MJaNd9X7/oMce6rekpSsMBeyV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
nevada_dca76e86bd8839c29ba483a379244a6a7687d50b5de7b5efdcb7f2e11e.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ