Behavioral task
behavioral1
Sample
ebc6e9e6a40fceb55f56174aee5398a5ef9cadf5c88a19f2104727baff0dcb36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebc6e9e6a40fceb55f56174aee5398a5ef9cadf5c88a19f2104727baff0dcb36.exe
Resource
win10v2004-20221111-en
General
-
Target
ebc6e9e6a40fceb55f56174aee5398a5ef9cadf5c88a19f2104727baff0dcb36
-
Size
524KB
-
MD5
a31554f50476b36d5aa912f513138553
-
SHA1
e2a6a18d2723b18d9391f7856eab9d8851de3592
-
SHA256
ebc6e9e6a40fceb55f56174aee5398a5ef9cadf5c88a19f2104727baff0dcb36
-
SHA512
ad0e271ec21abf3ef4fbc3137cd0b710ce8f46ade227e060451f91a97224ec46ff61b97a49fa9e5b45324e185cd83bd9574bae7f1cfd1ae0be21dbb398a48119
-
SSDEEP
6144:SKkY0+xTWl0ZqwXbn9nNDxk1xsD8JicE8d4T+9fQ:SK0+xTm0YwXbn9nN12svcE8dK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ebc6e9e6a40fceb55f56174aee5398a5ef9cadf5c88a19f2104727baff0dcb36.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE