Behavioral task
behavioral1
Sample
e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf.exe
Resource
win10v2004-20220812-en
General
-
Target
e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf.7z
-
Size
63KB
-
MD5
642268e69622761b01224e57fc2954fc
-
SHA1
fe532e805d8e7d47f347291bbff185b909989025
-
SHA256
86c368f66a6435d574bd64b32a4fecbac82316c30b9b43b498392e8aeee1e2e9
-
SHA512
fd85c3d7124503a1a7f990806f0a0bfcf9959149d75e5a285bbed8594aee77bd542b353043783c5c0b446dfbfe80e37167514a4ac77b8d1c8a8d222632ffbeb6
-
SSDEEP
1536:I5Ja1ZnZvwcYLbG523IW8An6CO+gygB/V9gDzBX:B/acYfGNXCOtygL9gv1
Malware Config
Signatures
-
resource yara_rule static1/unpack001/e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf upx
Files
-
e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf.7z.7z
Password: infected
-
e3d0df68fb6d028ffdd85bd0ebcb7ed04bc9c88c024c33ac0aaeb351f416b8bf.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE