Behavioral task
behavioral1
Sample
e1fd5f4ff7409acce12fd0eb3b6c7099ddc343d39505210678fd3d104a87dd5d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1fd5f4ff7409acce12fd0eb3b6c7099ddc343d39505210678fd3d104a87dd5d.exe
Resource
win10v2004-20220901-en
General
-
Target
e1fd5f4ff7409acce12fd0eb3b6c7099ddc343d39505210678fd3d104a87dd5d
-
Size
422KB
-
MD5
1ac8da8d9fab09f2b467ce05e2d022d9
-
SHA1
bd152511ee55582fb305335fefda5d8d7d415812
-
SHA256
e1fd5f4ff7409acce12fd0eb3b6c7099ddc343d39505210678fd3d104a87dd5d
-
SHA512
2a27ae99162e12b54af6e2c8a4f8ebb5adc3eb11fd290fa46a91306254e923ab5d52650ff87588b7ce4b9a3e625d8624cdf846abeeb7a78bb43be157ffd56909
-
SSDEEP
6144:Ns9XgA/96embbWeJvTT4V2jWpZV9Odt5XWSp0nUfet8RoDAG2Zm8WNVM+NAg0lO:MgAl6e+bNVSB+1WhUfezZ2ZfWNK+36O
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e1fd5f4ff7409acce12fd0eb3b6c7099ddc343d39505210678fd3d104a87dd5d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE