Behavioral task
behavioral1
Sample
e2863ec04ddb3712a0bc24c29ecb0b0ca9c085c77163ce0b7d2e7fbc958ac8a7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2863ec04ddb3712a0bc24c29ecb0b0ca9c085c77163ce0b7d2e7fbc958ac8a7.exe
Resource
win10v2004-20221111-en
General
-
Target
e2863ec04ddb3712a0bc24c29ecb0b0ca9c085c77163ce0b7d2e7fbc958ac8a7
-
Size
932KB
-
MD5
bff0386a1c67e52a24c8472a4d6a7d3c
-
SHA1
b5dd628f966274a2fe6c70f158c3b30da84be598
-
SHA256
e2863ec04ddb3712a0bc24c29ecb0b0ca9c085c77163ce0b7d2e7fbc958ac8a7
-
SHA512
96bbfb021895f4cc5965a7f12f28d3d0a57e6b6191b0f9c06649ac446d1969655534d8f35ecc8972b8cfd3e68945e5c225c3e95e1efac4657e12cd66ce550e39
-
SSDEEP
24576:3/j8z8saU1b+XPqnPQPwn6jwmRe7kaqXdK5Gvw:3/jdsZ1qfooPwnNwa+dK5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e2863ec04ddb3712a0bc24c29ecb0b0ca9c085c77163ce0b7d2e7fbc958ac8a7.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 916KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE