Behavioral task
behavioral1
Sample
e44dbe039723b71433fdf6124a4c46b8a9fca1d6ce5eaf2ebc8271ffa60676ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e44dbe039723b71433fdf6124a4c46b8a9fca1d6ce5eaf2ebc8271ffa60676ad.exe
Resource
win10v2004-20220812-en
General
-
Target
e44dbe039723b71433fdf6124a4c46b8a9fca1d6ce5eaf2ebc8271ffa60676ad
-
Size
365KB
-
MD5
449516f4818ef56fe7530bebc6ffa45d
-
SHA1
4940c0a2edff7c3d355d1487865e6c79209ef15e
-
SHA256
e44dbe039723b71433fdf6124a4c46b8a9fca1d6ce5eaf2ebc8271ffa60676ad
-
SHA512
a094036cabf98543326c9ea385e426453a93d11dbdb605189c4d59262860491fb551da2beea9c88751c820f4b578e273e1d9e117426d57f60a6652c6ac12713b
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH77:jt0VPFfsKAkrbPl77
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e44dbe039723b71433fdf6124a4c46b8a9fca1d6ce5eaf2ebc8271ffa60676ad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE