Behavioral task
behavioral1
Sample
e56711663da9defd790c33bbb4b508b12132e3c38c64d9945c033ec5b7d36b9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e56711663da9defd790c33bbb4b508b12132e3c38c64d9945c033ec5b7d36b9b.exe
Resource
win10v2004-20221111-en
General
-
Target
e56711663da9defd790c33bbb4b508b12132e3c38c64d9945c033ec5b7d36b9b
-
Size
59KB
-
MD5
fb4c79c5d19a60dd215708fda61c552a
-
SHA1
e0812c358324cb356968eaf14e7d53c28f177ea9
-
SHA256
e56711663da9defd790c33bbb4b508b12132e3c38c64d9945c033ec5b7d36b9b
-
SHA512
f6e9d355ab7494771d5a42039e04171e4fda30f55503ee608aa70376484eba68f1bc399d7f596ee26504a1b00528dcd69fc3fe9e61c911e91995a08dc52ec179
-
SSDEEP
768:OInS6BX1w1atDABTp7ROfcQAvRLZsFr4:Onow1atDABTP1rsu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e56711663da9defd790c33bbb4b508b12132e3c38c64d9945c033ec5b7d36b9b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE