Behavioral task
behavioral1
Sample
e981d8b29dbfa9c6becee2258b4f1ca324bf26d307ceef6d85f7c2243a627fe1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e981d8b29dbfa9c6becee2258b4f1ca324bf26d307ceef6d85f7c2243a627fe1.exe
Resource
win10v2004-20220812-en
General
-
Target
e981d8b29dbfa9c6becee2258b4f1ca324bf26d307ceef6d85f7c2243a627fe1
-
Size
261KB
-
MD5
02933888e0177e2c22931dd39d49c159
-
SHA1
306431cc0e40b0146938842e308415c395e07f60
-
SHA256
e981d8b29dbfa9c6becee2258b4f1ca324bf26d307ceef6d85f7c2243a627fe1
-
SHA512
b052df68b78f20ed0dfb499631f2990937f295d36a58d2bac3989e86cbf20e48aa14b7b9b874a5a029b6b52581d7324ee7a08bf9eec8d21819ed65a84fb99fbd
-
SSDEEP
6144:dhieHC2kSTF1x2N3WwoJPyamGZY6Klqc45oS9Lb:ueHCbUcN3ZotwG8+5oShb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e981d8b29dbfa9c6becee2258b4f1ca324bf26d307ceef6d85f7c2243a627fe1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE