Behavioral task
behavioral1
Sample
e2ff5dd54de284ae806903e7be0170fd0583a4bba82ca073cc2ee176157f3fe1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2ff5dd54de284ae806903e7be0170fd0583a4bba82ca073cc2ee176157f3fe1.exe
Resource
win10v2004-20220812-en
General
-
Target
e2ff5dd54de284ae806903e7be0170fd0583a4bba82ca073cc2ee176157f3fe1
-
Size
279KB
-
MD5
2726667b38bffdebca99c062a677ee30
-
SHA1
79df31b9c5e5933cfdf1798d407e11fff2434d8f
-
SHA256
e2ff5dd54de284ae806903e7be0170fd0583a4bba82ca073cc2ee176157f3fe1
-
SHA512
8dca2f5e946245ce2020fb2aa6038c566357a51287710c9fbe6b2e9e0e3a8e7de8dac7cb810dbf2cbaf839f25857d8a4c653a5db1a9bc9a708433b4799b4f792
-
SSDEEP
3072:qS/1AkBv7/wAYtRTfsKf3p+yAqGnM8Qy/fQwIhLGBDrvdbBVo32mZgCKg:qS/uW7PUf5+yAqGnMUXIBaDrFBqZHF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e2ff5dd54de284ae806903e7be0170fd0583a4bba82ca073cc2ee176157f3fe1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE