Behavioral task
behavioral1
Sample
e9fbdaa1d5fa35af97f86392ec1958b34c8ebe7b52ca74fbd757ce7b6f7d3d13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9fbdaa1d5fa35af97f86392ec1958b34c8ebe7b52ca74fbd757ce7b6f7d3d13.exe
Resource
win10v2004-20220901-en
General
-
Target
e9fbdaa1d5fa35af97f86392ec1958b34c8ebe7b52ca74fbd757ce7b6f7d3d13
-
Size
207KB
-
MD5
cb4b4120d2d6410ee3ec6b51b93a6554
-
SHA1
748c0b6812c6806bd9029ced6b4888f512a95786
-
SHA256
e9fbdaa1d5fa35af97f86392ec1958b34c8ebe7b52ca74fbd757ce7b6f7d3d13
-
SHA512
4c3bb44d807f3c29c330ee6d6fba0521389c119da6021e61c13e8154836934301ef2eeecf582e0ea6302249bdb0780ecbc1894561d73754aa2871a01945ab04d
-
SSDEEP
3072:hCaoXWjJgqp2LOgS6Tkq+K86IWx0DFm6izIKNIGEVQioLJu7BUpUxch1rj165:kaoXWjJgqp29lg2IXDEcxhH/crj
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e9fbdaa1d5fa35af97f86392ec1958b34c8ebe7b52ca74fbd757ce7b6f7d3d13.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE