Behavioral task
behavioral1
Sample
ec535bd25670264ccf9b1abfb02a3ff183c70e468aafa11a946144ffdaa03bd6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec535bd25670264ccf9b1abfb02a3ff183c70e468aafa11a946144ffdaa03bd6.exe
Resource
win10v2004-20220812-en
General
-
Target
ec535bd25670264ccf9b1abfb02a3ff183c70e468aafa11a946144ffdaa03bd6
-
Size
136KB
-
MD5
bd12b4e8f9ab0ddc72f3453083d7f92f
-
SHA1
ba6b42092897c81dc5603872b509f86210414498
-
SHA256
ec535bd25670264ccf9b1abfb02a3ff183c70e468aafa11a946144ffdaa03bd6
-
SHA512
d5a4eb4c51a0276c21bebcedad7b1a063f0ecbc36b20d8244383074d2f6912d5c7992b17ff84efc27e51190d8f0a0c30138bb06e44b843ca9771e73b0aaee1b8
-
SSDEEP
3072:nL69fOP9o7r0/0uzU/9aNymWGJAMZvaK9ulM:kE9000uzU/oMmWGJAMZvaK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec535bd25670264ccf9b1abfb02a3ff183c70e468aafa11a946144ffdaa03bd6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE