Behavioral task
behavioral1
Sample
e4b3b7c8d3b882ac2c71988ec463ce0b65e33d3c4d15a593f4dd6ccd3b1fc696.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4b3b7c8d3b882ac2c71988ec463ce0b65e33d3c4d15a593f4dd6ccd3b1fc696.exe
Resource
win10v2004-20220901-en
General
-
Target
e4b3b7c8d3b882ac2c71988ec463ce0b65e33d3c4d15a593f4dd6ccd3b1fc696
-
Size
406KB
-
MD5
9604f46263b334f48b2cb388d5af4780
-
SHA1
b44de294f0dc750d287fc94d62b63272db84cdd1
-
SHA256
e4b3b7c8d3b882ac2c71988ec463ce0b65e33d3c4d15a593f4dd6ccd3b1fc696
-
SHA512
7d4e4d6288a7a350c453a3587b5b3a55454fcb04d148765e0831bd003a254212796418b61c1373d78a33a62459d062ac3bfd02d37ebe68427ae078966c40d83c
-
SSDEEP
6144:i4UXYyNPHrkfEoJ4uzdfuevGmFdWs2pMJg4RGhGv1XOyU86o9u2W5:yXhhLenJn3aMJlGcppQ2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e4b3b7c8d3b882ac2c71988ec463ce0b65e33d3c4d15a593f4dd6ccd3b1fc696.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE