Behavioral task
behavioral1
Sample
11d7ebc7c65a76891939183923f400cc3304abea03d2af5812c538951b3dddc6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
11d7ebc7c65a76891939183923f400cc3304abea03d2af5812c538951b3dddc6.exe
Resource
win10v2004-20230221-en
General
-
Target
11d7ebc7c65a76891939183923f400cc3304abea03d2af5812c538951b3dddc6
-
Size
502KB
-
MD5
8a8c6e89f6ee03ebd44165229a1af795
-
SHA1
f10c2ae99ae14aeb079f7e24dda3307e0b3eed40
-
SHA256
11d7ebc7c65a76891939183923f400cc3304abea03d2af5812c538951b3dddc6
-
SHA512
cc676a0133dd397c47b61041d4b0131ba76c37931a853512e6c00d1cf54d3a12fb992b905490dc40824695c0c8819ef7fc64697d1ab34800913c261d5033c0f5
-
SSDEEP
12288:z/sBodl6JD3bUj/yTsP9EcsSujAmSVH4:QPJHkKwP9EcsFAZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
11d7ebc7c65a76891939183923f400cc3304abea03d2af5812c538951b3dddc6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 418KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ