Behavioral task
behavioral1
Sample
eb052ad08fc41c5291f7fc689cc6fb49d60e9e605c4c5e1ad3785429d887b932.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb052ad08fc41c5291f7fc689cc6fb49d60e9e605c4c5e1ad3785429d887b932.exe
Resource
win10v2004-20220812-en
General
-
Target
eb052ad08fc41c5291f7fc689cc6fb49d60e9e605c4c5e1ad3785429d887b932
-
Size
261KB
-
MD5
7b98ba101b64d6cff544e20ed96b1452
-
SHA1
861748d828f7d358373254fd4179ae0f8acccd01
-
SHA256
eb052ad08fc41c5291f7fc689cc6fb49d60e9e605c4c5e1ad3785429d887b932
-
SHA512
34984117b2d42212d558e38ae1d235abd7c08e2280891e2a9e5102bbc08ec267d0feaa8e207ff4f08d5730a168da356cc07ad7e579e7e88c3740d7536b3a09c3
-
SSDEEP
6144:+xnObdntY4Fb2V2AOCswNm8bAxBcli4X9hZ:6nObJZb/rAmQAxBKHNhZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
eb052ad08fc41c5291f7fc689cc6fb49d60e9e605c4c5e1ad3785429d887b932.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx