Behavioral task
behavioral1
Sample
ea841331e722d0dbe6324f9c232c7351feef1e11385f96f5556e9a09b2ffec7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea841331e722d0dbe6324f9c232c7351feef1e11385f96f5556e9a09b2ffec7e.exe
Resource
win10v2004-20220812-en
General
-
Target
ea841331e722d0dbe6324f9c232c7351feef1e11385f96f5556e9a09b2ffec7e
-
Size
499KB
-
MD5
6604a361a9c9c68735839cb2174cfb8d
-
SHA1
dea7cad1eb6c04d559b0e34d284e7ee3d46a277d
-
SHA256
ea841331e722d0dbe6324f9c232c7351feef1e11385f96f5556e9a09b2ffec7e
-
SHA512
d5cc4ca003e60347db0f57ea6b97c5a1500ef221390a7f5e36e1c770239cbb95d6aecf9dc1c70159952a762da6b4e63677f7b81a7dd7fca94b134593965dc5eb
-
SSDEEP
6144:QNM7Wt6+qhagy0a5alG+dgWcI2o3X+dKVjQiyEQYfiALE3G0kypsH8uSE:QC7IfOagyJaloWeTPkypsH8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ea841331e722d0dbe6324f9c232c7351feef1e11385f96f5556e9a09b2ffec7e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE