Behavioral task
behavioral1
Sample
e1138f828d2d80cbb9c583f93bbbd3308d64f3c3b4d4a786cf062e051f5b661b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1138f828d2d80cbb9c583f93bbbd3308d64f3c3b4d4a786cf062e051f5b661b.exe
Resource
win10v2004-20221111-en
General
-
Target
e1138f828d2d80cbb9c583f93bbbd3308d64f3c3b4d4a786cf062e051f5b661b
-
Size
124KB
-
MD5
debecacdadcc74dddff8bc58adb86ff5
-
SHA1
9550b47ec739564328565381954de40d2d94b10c
-
SHA256
e1138f828d2d80cbb9c583f93bbbd3308d64f3c3b4d4a786cf062e051f5b661b
-
SHA512
e269def94199958ec0919454ff2363130aadd6a80570891611a5e2626af2aa01944a7e0307ae36b8b2b6913977f50234d8bf105922f5882ff61462a57600c5c3
-
SSDEEP
3072:hxuow7mMDfh86QnfSbX1bbZRKphf3xTMDCKZ174H0P0wh:MTh86K21bbc93dgFZ1MS0w
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e1138f828d2d80cbb9c583f93bbbd3308d64f3c3b4d4a786cf062e051f5b661b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 1024B - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ