Behavioral task
behavioral1
Sample
e646489f28f4448e6b9922ddb0532a7e2f4560a3695b1a3dc4a6e4ea0c6358c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e646489f28f4448e6b9922ddb0532a7e2f4560a3695b1a3dc4a6e4ea0c6358c8.exe
Resource
win10v2004-20220901-en
General
-
Target
e646489f28f4448e6b9922ddb0532a7e2f4560a3695b1a3dc4a6e4ea0c6358c8
-
Size
292KB
-
MD5
6095dccdf9a60d3c26ac5bd17bcd1952
-
SHA1
886905e22440fc27e917d578aefbd46ba00a8431
-
SHA256
e646489f28f4448e6b9922ddb0532a7e2f4560a3695b1a3dc4a6e4ea0c6358c8
-
SHA512
6a07d228cb2c48f01eb2983d06d589962a0beb63b5402bfeaa21b58dbd7db7e4f58e63467e290e66833e3ccda79ce68a5719742afb1c08657a4da182f9b702af
-
SSDEEP
6144:sN+HTr4epupI3/4YIJ8m1MxUyRzoVOBlYQflIGB:sNgrZjP4BJTM6++OBlYERB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e646489f28f4448e6b9922ddb0532a7e2f4560a3695b1a3dc4a6e4ea0c6358c8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE