Behavioral task
behavioral1
Sample
e140f4d79cacd25e688bf397dbc8e25e7729c81a28f70696d197efb808d55e51.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e140f4d79cacd25e688bf397dbc8e25e7729c81a28f70696d197efb808d55e51.exe
Resource
win10v2004-20220812-en
General
-
Target
e140f4d79cacd25e688bf397dbc8e25e7729c81a28f70696d197efb808d55e51
-
Size
2.4MB
-
MD5
7306e7f0df9e18b073cbf8a933671545
-
SHA1
8d26d50a35cf786b14f4274e9c7df8db005e90dd
-
SHA256
e140f4d79cacd25e688bf397dbc8e25e7729c81a28f70696d197efb808d55e51
-
SHA512
200b56b7b51bc3193b8ad62b728074b4a2ec691dcebf431bcc285c396f2fe4b0498566b92e314bf18dfeb6114b11d975dee46aef6a26470c7fb3a456d8a482fa
-
SSDEEP
49152:/FxS5OXNGMJNAp4ZbZ/+2UkG9m9GVsbRBN1dZWM7j+LgftG0kR:NxyaNCU+2UD9He5rZWe+8ftG0kR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e140f4d79cacd25e688bf397dbc8e25e7729c81a28f70696d197efb808d55e51.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE