Behavioral task
behavioral1
Sample
e3effe2fa8285f115a734fc2e2103ce6ce34e3229935f5266e236ecf6b430e6e.exe
Resource
win7-20220812-en
General
-
Target
e3effe2fa8285f115a734fc2e2103ce6ce34e3229935f5266e236ecf6b430e6e
-
Size
459KB
-
MD5
931028821bd0f065650afdf478d5b91b
-
SHA1
ebe8450d6537aa07ff9ae369ce9e846833908772
-
SHA256
e3effe2fa8285f115a734fc2e2103ce6ce34e3229935f5266e236ecf6b430e6e
-
SHA512
b86abd4a265028dbc513718c71bcaf27cf6e9c32e44eeed9adc07dc37812d0a96d80823a8ad1d32e354cd50a39f9b7fcf512801729212f2716e205b45c308f2b
-
SSDEEP
12288:gPs1RMC8fJ6Doclabj2Hy8jEno5mbSRp03Vzm/sisj:8+RMrKhlab5oEnogbSRe3VBiM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e3effe2fa8285f115a734fc2e2103ce6ce34e3229935f5266e236ecf6b430e6e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZC Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE