Behavioral task
behavioral1
Sample
ea6b0524606a2f9aa46abe150eeefa216334cbe3df8102ce2bf3ccc73e50c44f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ea6b0524606a2f9aa46abe150eeefa216334cbe3df8102ce2bf3ccc73e50c44f.exe
Resource
win10v2004-20221111-en
General
-
Target
ea6b0524606a2f9aa46abe150eeefa216334cbe3df8102ce2bf3ccc73e50c44f
-
Size
432KB
-
MD5
594633d781ffa2b1e1745ef8c8a137b3
-
SHA1
0fd7d1f64ccba7eaa6be943cc7ab44bd7a836cb4
-
SHA256
ea6b0524606a2f9aa46abe150eeefa216334cbe3df8102ce2bf3ccc73e50c44f
-
SHA512
dbf98464db37da464bd4c666a1a32d554247738823d99b5745c2460f6d79c66e80061b9d5389aff922217fb7875596da8df065500289e11646fc1c5252932e79
-
SSDEEP
6144:b1QffzrJ3rqvHTkBg+UHcdQvLLiklsR3IEs/0pYAs4bZ0LIlR:Jkfzl3rqvzkAhv36R3+AnbOe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ea6b0524606a2f9aa46abe150eeefa216334cbe3df8102ce2bf3ccc73e50c44f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE