Behavioral task
behavioral1
Sample
ebc597ee447a3a50ba687505472d5fb4f2dc2c4724554a5e1952b3549c922045.exe
Resource
win7-20220901-en
General
-
Target
ebc597ee447a3a50ba687505472d5fb4f2dc2c4724554a5e1952b3549c922045
-
Size
1.1MB
-
MD5
02371d235ef59a16ab9fb7b2f8691156
-
SHA1
eec0a0e2375594b446d1cc9e6a46e39fa2cc261b
-
SHA256
ebc597ee447a3a50ba687505472d5fb4f2dc2c4724554a5e1952b3549c922045
-
SHA512
322ed7bb403d65653d044d6033dc8160e083ad4613170db3cee48a948e780f5fb708a31f2875523d0242bf4f7deb3ce43ec723bbf9afdc978cb81f0af4d1eee3
-
SSDEEP
24576:7sYZVUnBz6NKPkOUqMhHiln753L+/T4rTtcqtFUWMMrQ:NZuJ6bwYilnF3L+/T4rTJFUWMMc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ebc597ee447a3a50ba687505472d5fb4f2dc2c4724554a5e1952b3549c922045.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 523KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE