Behavioral task
behavioral1
Sample
e31f009208b752fd36e9ad4c32c4b2f8a015f5fee3681dcd82810bedf8c6c9f8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e31f009208b752fd36e9ad4c32c4b2f8a015f5fee3681dcd82810bedf8c6c9f8.exe
Resource
win10v2004-20220812-en
General
-
Target
e31f009208b752fd36e9ad4c32c4b2f8a015f5fee3681dcd82810bedf8c6c9f8
-
Size
197KB
-
MD5
d7b41912b88f86e2b57096091aa3852a
-
SHA1
5a0979e8b9e7ba94b6771419fc5a5d5f4ce347aa
-
SHA256
e31f009208b752fd36e9ad4c32c4b2f8a015f5fee3681dcd82810bedf8c6c9f8
-
SHA512
7b46ad73ae488d6a27c324ed384c1d2d08c4f6dcd31dfd8365a0cdebdd6da6a196b1d3174769c877c970aad1e23760fc4406be18487198d67072150d61c5b98d
-
SSDEEP
3072:jV1BPw/zPNkp5dgofUlA5I4lPs70BLo7:RPpp5dbfRlk70i
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e31f009208b752fd36e9ad4c32c4b2f8a015f5fee3681dcd82810bedf8c6c9f8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE