Behavioral task
behavioral1
Sample
ec3877048c95ea8c4db0a14d89a12c1913603a15fd3cb7fcd708f0949e4dc123.exe
Resource
win7-20220812-en
General
-
Target
ec3877048c95ea8c4db0a14d89a12c1913603a15fd3cb7fcd708f0949e4dc123
-
Size
1.1MB
-
MD5
45385633b059902e806c8b01bccc8c01
-
SHA1
f52899618ad0c85fe6688934a4d8c326f706b3ea
-
SHA256
ec3877048c95ea8c4db0a14d89a12c1913603a15fd3cb7fcd708f0949e4dc123
-
SHA512
5ed2a0161828e10d4639d6bf391f5544014bba3f8c83a16dabff1697c55f8b35d503dfaa1426e4eb27618f173154bd89559af2f9155353fae19127d0017c21cf
-
SSDEEP
24576:ZsYZVUnBz6NKPkOUqMhHiln753L+/T4rTN9qtFUP5MMws:XZuJ6bwYilnF3L+/T4rTqFUhMMh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ec3877048c95ea8c4db0a14d89a12c1913603a15fd3cb7fcd708f0949e4dc123.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE