Behavioral task
behavioral1
Sample
e1e1c7ffbb32a4a25e18df0e2f654da8df67f5ecc9bdd8ba4fdfe8f38b3f1b3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1e1c7ffbb32a4a25e18df0e2f654da8df67f5ecc9bdd8ba4fdfe8f38b3f1b3b.exe
Resource
win10v2004-20220812-en
General
-
Target
e1e1c7ffbb32a4a25e18df0e2f654da8df67f5ecc9bdd8ba4fdfe8f38b3f1b3b
-
Size
186KB
-
MD5
bda6e22ad11d2746a020f8c6cd0a9023
-
SHA1
dc66d5a067b45b7724c588d1a35854dbb30cca47
-
SHA256
e1e1c7ffbb32a4a25e18df0e2f654da8df67f5ecc9bdd8ba4fdfe8f38b3f1b3b
-
SHA512
56f6a975053cf9b3228ba534738c175364cb3d8ab752fb493aa259eab8e0988afc7b9f58db7e931764adfc630cca69d0cc1fd297463600091efc6a4fcfa814f5
-
SSDEEP
3072:JeldbHsddYN1l2lD/mBVaGcCx4CYsFN/q1VfreNv5c:q32F/saGcCaCYsKj6R5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e1e1c7ffbb32a4a25e18df0e2f654da8df67f5ecc9bdd8ba4fdfe8f38b3f1b3b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE