Behavioral task
behavioral1
Sample
e56936a894f207fbe9c53e8d764d7c2431acf0b93f9f0a3462f2e90a07a58b99.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e56936a894f207fbe9c53e8d764d7c2431acf0b93f9f0a3462f2e90a07a58b99.exe
Resource
win10v2004-20221111-en
General
-
Target
e56936a894f207fbe9c53e8d764d7c2431acf0b93f9f0a3462f2e90a07a58b99
-
Size
320KB
-
MD5
34e397aeea61331fd47b34a8afd0e904
-
SHA1
133e1bd76cd594f6883a451e5930670b475459ef
-
SHA256
e56936a894f207fbe9c53e8d764d7c2431acf0b93f9f0a3462f2e90a07a58b99
-
SHA512
22bb2394d95d8b9001d4670c39ea7feab41a17e48a9a80b943f3b2dab712767b6f17c0c8f40cfe0471445170d2b6caa56563dcddd33e8bd19442a376b8ff1b97
-
SSDEEP
6144:ocoUaVDr5my1M2gFnvBLUIcHJCazhnauMK+ol:oLJrIhlepCaBx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e56936a894f207fbe9c53e8d764d7c2431acf0b93f9f0a3462f2e90a07a58b99.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE