Behavioral task
behavioral1
Sample
e93a7449d2015424a6cf727a42352a1ad98e11d2ae3592a50593ecc77018f6cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e93a7449d2015424a6cf727a42352a1ad98e11d2ae3592a50593ecc77018f6cd.exe
Resource
win10v2004-20220812-en
General
-
Target
e93a7449d2015424a6cf727a42352a1ad98e11d2ae3592a50593ecc77018f6cd
-
Size
245KB
-
MD5
6101ed72158c5ce58e544a7d571c7731
-
SHA1
01001dc7573e99eee28ae67cdd9ace70fac973ec
-
SHA256
e93a7449d2015424a6cf727a42352a1ad98e11d2ae3592a50593ecc77018f6cd
-
SHA512
2769c8c1072e7937be9fd27d6c7a67f374f2da115d7166e6d3800982b4f97ca6a567d5458915e82a344a4e42eed92bf8a9b899a544d2b4c6012866521fe7ac75
-
SSDEEP
6144:T7UYntUlCVmbYiZEX2k+AxJj998C3r6Xpkrax/xOu:/cEV8Z4J+3C3Ojt1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e93a7449d2015424a6cf727a42352a1ad98e11d2ae3592a50593ecc77018f6cd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ