Behavioral task
behavioral1
Sample
e3ff50b5b8dd3e7837a9c43e44c85e1de1d66abc0aefba717cca2a52e61b69b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3ff50b5b8dd3e7837a9c43e44c85e1de1d66abc0aefba717cca2a52e61b69b8.exe
Resource
win10v2004-20220901-en
General
-
Target
e3ff50b5b8dd3e7837a9c43e44c85e1de1d66abc0aefba717cca2a52e61b69b8
-
Size
125KB
-
MD5
90ebc22bcfdaef37bb7dc5f6b49f8bdb
-
SHA1
9b50dd3570ce29123c281a88833797c35b5b57ff
-
SHA256
e3ff50b5b8dd3e7837a9c43e44c85e1de1d66abc0aefba717cca2a52e61b69b8
-
SHA512
61f37af4529588f366485547080ed50260425a844184c66806cf3b600be1ace0656dcc3b79cb458c94d49613c7e948a9740a9e82e8650c78acb341a41eb4f31e
-
SSDEEP
3072:NBwV4OgSzBmh04eZFkz3Rr0gwGj9Tf8zwoaOW5mUK:NBMzzILGFkzhr0pGj9ozm5mUK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e3ff50b5b8dd3e7837a9c43e44c85e1de1d66abc0aefba717cca2a52e61b69b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE