Behavioral task
behavioral1
Sample
e2f100dbd2ecd58bc378674e259220689a5594a7111896aa698578d7ecef2c5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2f100dbd2ecd58bc378674e259220689a5594a7111896aa698578d7ecef2c5b.exe
Resource
win10v2004-20220812-en
General
-
Target
e2f100dbd2ecd58bc378674e259220689a5594a7111896aa698578d7ecef2c5b
-
Size
4.9MB
-
MD5
accaae7fd5aade0ffcc47e2f3ba9db08
-
SHA1
cd3bd6353aadea65100467e98c4c6e2721ed5abd
-
SHA256
e2f100dbd2ecd58bc378674e259220689a5594a7111896aa698578d7ecef2c5b
-
SHA512
cb15e5d68292f53cd3e9a74411979b7f658464e56e991303c097b9d2b993ec58d2dc1e0c50d8b2d09a5eae91a6fb9655cc3114e52364a1d4f9bb46a0860e72d5
-
SSDEEP
98304:AKfNNVCMsScaU/HzgTVrb0D+5Mo/JSc1wlgosouiJKFW:AKNDncaUvzgBrwD+5MOJSceqosbBFW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e2f100dbd2ecd58bc378674e259220689a5594a7111896aa698578d7ecef2c5b.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
0000 Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U000 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE