Behavioral task
behavioral1
Sample
ec06d12abd9ca57808f1cf6b817b668025fc10bc49c6f256ae5a9783ed6aa72d.exe
Resource
win7-20220812-en
General
-
Target
ec06d12abd9ca57808f1cf6b817b668025fc10bc49c6f256ae5a9783ed6aa72d
-
Size
127KB
-
MD5
2324d5b837c437a0b440ed696a4fb34d
-
SHA1
f740d31f7fe78fa891982dd18e23a3e8e6f005ce
-
SHA256
ec06d12abd9ca57808f1cf6b817b668025fc10bc49c6f256ae5a9783ed6aa72d
-
SHA512
14284a9692c39a709d1b711bd73dac8b69c38db75234fda702e2284de0877bfe296b450f6b38652d0e9985617a8534791ba20b2806445e218f8a53f9bc5937a4
-
SSDEEP
3072:DHZVsAHrCh2sxp0GgMq6qh3j34ZQxfTYTgch+cMo:TfsAHm8sxp0HMJi3j34ZQ6VMo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec06d12abd9ca57808f1cf6b817b668025fc10bc49c6f256ae5a9783ed6aa72d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
irzgvqr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE