Behavioral task
behavioral1
Sample
3ecb5c29183637308c4b8fc4e4b8e58991636a0a61f91e109e330b15f94ebb7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3ecb5c29183637308c4b8fc4e4b8e58991636a0a61f91e109e330b15f94ebb7c.exe
Resource
win10v2004-20220812-en
General
-
Target
3ecb5c29183637308c4b8fc4e4b8e58991636a0a61f91e109e330b15f94ebb7c
-
Size
46KB
-
MD5
853e91384e20c2907164bab7194d007d
-
SHA1
ec4ff927d33ee88a7bee83e2769cdec2a2054bdd
-
SHA256
3ecb5c29183637308c4b8fc4e4b8e58991636a0a61f91e109e330b15f94ebb7c
-
SHA512
32fb936afec5dbe796c9b451881b750e77666d82c3a62b867fe94efc350658d45e033cb9b4d0e98cb5dada89c9f464e2cabe7b0e4b886c7e2b981543f60232cd
-
SSDEEP
384:8jqroMgdObkN4kpH4aIJ40MUw6GYtmTICkt8Wjh+fztUmTbVPqiy7NCc6N/ECv0Y:oegwkpH4aIGjRYTt/AxPbsZ7GJECQi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3ecb5c29183637308c4b8fc4e4b8e58991636a0a61f91e109e330b15f94ebb7c.exe windows x86
9d26a7db02099737f26267c1519ff9a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
msvbvm60
ord581
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE