Behavioral task
behavioral1
Sample
ebc66d57ccc7c6b348d5e9708006435ff6aa5423d44767ebe2d2782ddcbdf7e2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ebc66d57ccc7c6b348d5e9708006435ff6aa5423d44767ebe2d2782ddcbdf7e2.exe
Resource
win10v2004-20220812-en
General
-
Target
ebc66d57ccc7c6b348d5e9708006435ff6aa5423d44767ebe2d2782ddcbdf7e2
-
Size
125KB
-
MD5
a9a156f6e5fa00431208cac43be282ea
-
SHA1
510be5a7362e6ab4647abdfa81e5281c8be4ea65
-
SHA256
ebc66d57ccc7c6b348d5e9708006435ff6aa5423d44767ebe2d2782ddcbdf7e2
-
SHA512
054b4deaff130dbd33261f36fb6217e05d4ec2c1f70b1d295f9996d3d699fcf0483c98b3613eafec374104b27c3be4179f1a3ca6813ac11a13bb05b2449418a9
-
SSDEEP
1536:xOC0FvV4OguHxjhpA4BmyuW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:xwV4OgSzBm004eZFkz3Rr0gwGj9Tf8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ebc66d57ccc7c6b348d5e9708006435ff6aa5423d44767ebe2d2782ddcbdf7e2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE