Behavioral task
behavioral1
Sample
e524ac0ac7d4d888ba5898ea44fa68c3797d21bea849e61a6a8c886d64ca70a9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e524ac0ac7d4d888ba5898ea44fa68c3797d21bea849e61a6a8c886d64ca70a9.exe
Resource
win10v2004-20221111-en
General
-
Target
e524ac0ac7d4d888ba5898ea44fa68c3797d21bea849e61a6a8c886d64ca70a9
-
Size
222KB
-
MD5
541fcf2d685332fbe348c8c46872f92e
-
SHA1
a7a965b659198d389c649130926c0a9d7945d49e
-
SHA256
e524ac0ac7d4d888ba5898ea44fa68c3797d21bea849e61a6a8c886d64ca70a9
-
SHA512
d0869a42fdd0eb5e7373fc740ed5105b180a25593f9e1a2882f34001ca80bb220b9ad6e8eea1ce8b5d54926f47f68514e882e2ebfa167cafd691c17e482e5bdf
-
SSDEEP
1536:4dzth4IWY8zlymDS4/wSDbTk3TkWcVLoYsue3aaV17InRFLD8pYgAI74I:4d5hAzlXd/Fkjk5faV17IROj74I
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e524ac0ac7d4d888ba5898ea44fa68c3797d21bea849e61a6a8c886d64ca70a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE