Behavioral task
behavioral1
Sample
e7a896ddc7fb38167edfefca7ad51cbee29e3b34f167c6f9cf669499d3232aa5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7a896ddc7fb38167edfefca7ad51cbee29e3b34f167c6f9cf669499d3232aa5.exe
Resource
win10v2004-20220812-en
General
-
Target
e7a896ddc7fb38167edfefca7ad51cbee29e3b34f167c6f9cf669499d3232aa5
-
Size
424KB
-
MD5
15c0328e0b61c9931a6d37efd0c2bc10
-
SHA1
bd2df609583e99fc9b33bb55c87527324a929f96
-
SHA256
e7a896ddc7fb38167edfefca7ad51cbee29e3b34f167c6f9cf669499d3232aa5
-
SHA512
e44f8f83635b091e36a7633826f3a4176739cf05cd785a0b885e1617b6f810485cf0e6151cce1c11ba87c3bd48511bac00248b1f69e0a91d37075d0ce1919826
-
SSDEEP
12288:6NE8anssOPVqxKMybXT9Pv5JISCokeHvi+seiWt5+AwksoGyQilQzL8k:0xanssOPVqxOp3v+CKsfgkYRCc8k
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e7a896ddc7fb38167edfefca7ad51cbee29e3b34f167c6f9cf669499d3232aa5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 4KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ