Behavioral task
behavioral1
Sample
e052dfc72b28f5c2039ce01721ccabf62e0a19449a7c7e226611065e3e4c376e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e052dfc72b28f5c2039ce01721ccabf62e0a19449a7c7e226611065e3e4c376e.exe
Resource
win10v2004-20221111-en
General
-
Target
e052dfc72b28f5c2039ce01721ccabf62e0a19449a7c7e226611065e3e4c376e
-
Size
295KB
-
MD5
46fb5cf3df967c80d743357be0673660
-
SHA1
648d63633785376453755cf914901c33446eb8d5
-
SHA256
e052dfc72b28f5c2039ce01721ccabf62e0a19449a7c7e226611065e3e4c376e
-
SHA512
1bf69a34f14c7bead01213f89b376e25f966dd93ad1f37e375ed3082ac6633932d24cb620d4eefd259fe1fda151a11a3216ce99a83a235cf5085c17b20341625
-
SSDEEP
6144:oQM932+gBU5eDC9sScWVMNTya+/hrni3yVmF5Ywj8gSXEUPj:oFInBWUMtV2Xeni3smr1SUUb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e052dfc72b28f5c2039ce01721ccabf62e0a19449a7c7e226611065e3e4c376e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 194KB - Virtual size: 404KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 40KB
IMAGE_SCN_MEM_READ
.reloc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ