Behavioral task
behavioral1
Sample
e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe
Resource
win10v2004-20220812-en
General
-
Target
e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086
-
Size
1.4MB
-
MD5
aa026cd040920d7d8a7bea7d7e5cd990
-
SHA1
eee357475a19d414953477ea953c32171f1754d0
-
SHA256
e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086
-
SHA512
f49932f586f166b6b401bb8d33eb1773aca500ccd9fba48469f40dffee154642b01aed21a85bbd1909302ba882ad8bfbddf55c7aa887c505ae58a7511690383a
-
SSDEEP
24576:KsW3XI7rWIEO0eDfcPOvCOpMEPJonhql5oHS+zh3JajtObuF+T+NUFRjUgIeX401:CKrOuCQhJohq3oHrh3JajtObu2+NUF5r
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e4e2c9d7dd2cb99ecce2f3c00dd8164b0377fd34f795fd4b8994889972927086.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1008KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ENGINE Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE