Behavioral task
behavioral1
Sample
e5ae5baa840aa9f70c3adf637c77e3da871f9ba46cfae779056f9d26188ff3f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5ae5baa840aa9f70c3adf637c77e3da871f9ba46cfae779056f9d26188ff3f0.exe
Resource
win10v2004-20220901-en
General
-
Target
e5ae5baa840aa9f70c3adf637c77e3da871f9ba46cfae779056f9d26188ff3f0
-
Size
519KB
-
MD5
ec08c0243b2c1d47052c94f7502fb91f
-
SHA1
9108c3c385b685092a27639ea451ec298571993b
-
SHA256
e5ae5baa840aa9f70c3adf637c77e3da871f9ba46cfae779056f9d26188ff3f0
-
SHA512
402d38cf53153eded76aaf265584afa92b923ca7a0f10cebbda899828021fa21559655c018cb8ce61077af237770fcbe0aa086e5a30a5afb1f5a4594813d6767
-
SSDEEP
12288:bU0vRxruwbAKRrVe5QL9Zx6Wq6rQORzbdtqBHpO9C458+:bNRxBy69SWjUOhB19CYR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e5ae5baa840aa9f70c3adf637c77e3da871f9ba46cfae779056f9d26188ff3f0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE