Behavioral task
behavioral1
Sample
ee8fbd9458a9daf22329265772b4a1f91b3d3a2ac50f48a07992e4bd2a2de493.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee8fbd9458a9daf22329265772b4a1f91b3d3a2ac50f48a07992e4bd2a2de493.exe
Resource
win10v2004-20220901-en
General
-
Target
ee8fbd9458a9daf22329265772b4a1f91b3d3a2ac50f48a07992e4bd2a2de493
-
Size
292KB
-
MD5
bfaec964c435060c71dd3fe4a45ccdf9
-
SHA1
ef8437f85d5f5ea3cb0fb44d1f3ef26b5211f47f
-
SHA256
ee8fbd9458a9daf22329265772b4a1f91b3d3a2ac50f48a07992e4bd2a2de493
-
SHA512
9bdf225d93214c20a665caf09d62c1186e2727c1702ceba5b4939d1317b836437e062b65d4a9fe5da5e139ac065044ed9c9ceca2d5727955cc2b51cffca844da
-
SSDEEP
6144:sN+HTr4epupX3/4YIJ8m1MxUyRzoVOBlYQflIGx:sNgrZEP4BJTM6++OBlYERx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ee8fbd9458a9daf22329265772b4a1f91b3d3a2ac50f48a07992e4bd2a2de493.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE