Behavioral task
behavioral1
Sample
e28087c6c5d2251d1ffe5ff9d61cb5302f40081282ddfce5c9c7a1b9718f6896.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e28087c6c5d2251d1ffe5ff9d61cb5302f40081282ddfce5c9c7a1b9718f6896.exe
Resource
win10v2004-20220812-en
General
-
Target
e28087c6c5d2251d1ffe5ff9d61cb5302f40081282ddfce5c9c7a1b9718f6896
-
Size
401KB
-
MD5
691d8004ef7af19de257d15cc311f230
-
SHA1
c567e983b3d4b700b9e10e4c8480046568c9efde
-
SHA256
e28087c6c5d2251d1ffe5ff9d61cb5302f40081282ddfce5c9c7a1b9718f6896
-
SHA512
c65fee6c8444f102f24a65ffc533d5805edde0969782c3110ba2cd19c07620245ddc51d85d9e87c5827f9aee8cf4188fb4f329af2740d23c14234f60dcba566e
-
SSDEEP
6144:k0JYltOEmqg38Lfyl69Kw0k/dB9Tsu2Qn4U68wbK:mlqm7s69K4/2Qn76vK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e28087c6c5d2251d1ffe5ff9d61cb5302f40081282ddfce5c9c7a1b9718f6896.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE