Behavioral task
behavioral1
Sample
ec8de59c356aaf11d375655931bd4b1f79843e163a1a328c96282aa98902cde8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec8de59c356aaf11d375655931bd4b1f79843e163a1a328c96282aa98902cde8.exe
Resource
win10v2004-20220812-en
General
-
Target
ec8de59c356aaf11d375655931bd4b1f79843e163a1a328c96282aa98902cde8
-
Size
133KB
-
MD5
0c2294c598cbf258346a3a35f8ff2175
-
SHA1
1364cc93174051dd81d3040ba8b5a74c9f1283d4
-
SHA256
ec8de59c356aaf11d375655931bd4b1f79843e163a1a328c96282aa98902cde8
-
SHA512
e45cd56df1b8593b2d0f8061c62877eb03de71a16a928b6fa0cd17b4be7791969e828b96d6b797627df6b554f5aeee92dab77f6c936e4630fa65763f5efff3a9
-
SSDEEP
1536:NeNFrlTvbbVladlSgUG2+f2WTt9fpOQLgPui6M0vtKQOLw/2Nj:ORnYlVV2+f2IjpgmiRcAQzU
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec8de59c356aaf11d375655931bd4b1f79843e163a1a328c96282aa98902cde8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE