Behavioral task
behavioral1
Sample
ec4ad802425d77140cae3251012deb2f8c70abca77a9ea5a54bb079458e2df66.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ec4ad802425d77140cae3251012deb2f8c70abca77a9ea5a54bb079458e2df66.exe
Resource
win10v2004-20220812-en
General
-
Target
ec4ad802425d77140cae3251012deb2f8c70abca77a9ea5a54bb079458e2df66
-
Size
707KB
-
MD5
0b19eeb390119a45094a0a787a3df27d
-
SHA1
9451dc92867477cc2876b934dc3bd07f8f24b747
-
SHA256
ec4ad802425d77140cae3251012deb2f8c70abca77a9ea5a54bb079458e2df66
-
SHA512
421800c634c277a0116e843984f481461b3c6607d76033d0f331ef8e8780a9cb835f1b7460c7091b817e9bad938224a985129ce348f949880b49aa9b47b60c5c
-
SSDEEP
12288:+lOy2y3biejCPeX4QsP8hrYZqYMJ2u49ZCL0ekDaOS4dxTTJzYH6LrY4VH2ter40:+YlTmXhrYZqYMWbDaOXLJ4ab
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec4ad802425d77140cae3251012deb2f8c70abca77a9ea5a54bb079458e2df66.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 681KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 95KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ