Behavioral task
behavioral1
Sample
e386c36eefa05d039ca8e896518ee0cc95f63a0c6a41bc220734b2f1ccef743d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e386c36eefa05d039ca8e896518ee0cc95f63a0c6a41bc220734b2f1ccef743d.exe
Resource
win10v2004-20221111-en
General
-
Target
e386c36eefa05d039ca8e896518ee0cc95f63a0c6a41bc220734b2f1ccef743d
-
Size
223KB
-
MD5
f2c356f87786627d763d29c3589df241
-
SHA1
1b9cce8bd5fcbc468935b562218b605201d89cc6
-
SHA256
e386c36eefa05d039ca8e896518ee0cc95f63a0c6a41bc220734b2f1ccef743d
-
SHA512
1c5d004c6fa4b04809730707a927082df456578a197c5876b15dab0245cde6503d4548668404bedb845d2e79790840fa5e4fc31f9da4bc949417e7cb05513b2b
-
SSDEEP
3072:DPrvY+VTqmolx0FdkREnTxQTZ2BNi1drKcehD:DPrv3dBSRETi8i1drZ6D
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e386c36eefa05d039ca8e896518ee0cc95f63a0c6a41bc220734b2f1ccef743d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE