Behavioral task
behavioral1
Sample
ec0c1e4ab96802018713ba4576875f16299ba28437cc4de95b4e380e82c25618.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec0c1e4ab96802018713ba4576875f16299ba28437cc4de95b4e380e82c25618.exe
Resource
win10v2004-20220812-en
General
-
Target
ec0c1e4ab96802018713ba4576875f16299ba28437cc4de95b4e380e82c25618
-
Size
431KB
-
MD5
0d6ba0457768f64255c14d1447b72abc
-
SHA1
f0ead9b11ed16d4b52ccf4570aff75a1cbca0140
-
SHA256
ec0c1e4ab96802018713ba4576875f16299ba28437cc4de95b4e380e82c25618
-
SHA512
a553aed408dc549131915596b6c259e09f7a4ac873f06eafefef945e24621b60519685dd90cefd3af4a5f7f3b3cb494de73a02c53c039d15ae4b0584d8977dcf
-
SSDEEP
12288:NWW6QuOWkEjCenEIMrwNtAzMc6ybszkPg:NWoWkEjHnPMbUi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec0c1e4ab96802018713ba4576875f16299ba28437cc4de95b4e380e82c25618.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE