Behavioral task
behavioral1
Sample
e7e21b48291e39cf68e5817273456228.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7e21b48291e39cf68e5817273456228.exe
Resource
win10v2004-20220901-en
General
-
Target
e7e21b48291e39cf68e5817273456228.exe
-
Size
689KB
-
MD5
e7e21b48291e39cf68e5817273456228
-
SHA1
80c6cec08651deb445cf9f0b921c591b1c3b6d84
-
SHA256
be82f1518413ae9185277ebfd9b39ee9913ae921b3e960e864bc9e5ed8c5e78b
-
SHA512
9f91982f5c41b4468d407a7a9a47c306a13443b9fd4806f4b2429e2c7b5ba7fa02241b9a88eb8088e960135c6ed8048d4a85da2f0a1940bedfa44456d364ef0a
-
SSDEEP
12288:No5HI2TJcYZ6W8E2AJK0DCQD95Prvp3ILUkkA0jfCfehhwTTsVPSjmy4iQqkTCEJ:NwI+JrVLJdDCQD9xv6LUkkA0jfHhczmv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e7e21b48291e39cf68e5817273456228.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
06216882 Size: 825KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE