Behavioral task
behavioral1
Sample
e4d089f8d58ccaf48f8f2095c05c6faa857f2939dca266e7f49b72e8f61c69cc.exe
Resource
win7-20221111-en
General
-
Target
e4d089f8d58ccaf48f8f2095c05c6faa857f2939dca266e7f49b72e8f61c69cc
-
Size
512KB
-
MD5
8c7161eeabb10a767345d4f0bd16d407
-
SHA1
5e3cb2fe375179797419831d7999e4cc60b526ce
-
SHA256
e4d089f8d58ccaf48f8f2095c05c6faa857f2939dca266e7f49b72e8f61c69cc
-
SHA512
85f3a77c1c18d16495519c287d16f739820338040398e73b6f3af619ea58957577cedec300753330cecfd0779c1db039751790bbeeb2016d8f95b9eeff22b54f
-
SSDEEP
1536:UJlO+0MLzG+OLfKxehJN/Ba6gZblpuiv0SvaxyXaCbZZC4+06gjIrCTRknanwuj5:SPzG+qg+mliy5bdH6MI2TqnOYE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e4d089f8d58ccaf48f8f2095c05c6faa857f2939dca266e7f49b72e8f61c69cc.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE