Behavioral task
behavioral1
Sample
e85f4b0213e0f6ed286f8566dc7e204bb3458a5e6166530152c1dd82d554f0fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e85f4b0213e0f6ed286f8566dc7e204bb3458a5e6166530152c1dd82d554f0fd.exe
Resource
win10v2004-20221111-en
General
-
Target
e85f4b0213e0f6ed286f8566dc7e204bb3458a5e6166530152c1dd82d554f0fd
-
Size
226KB
-
MD5
6127bebcfd269b413992b15b8010b8cc
-
SHA1
494f7529117307a53154742bc85887b343eba56e
-
SHA256
e85f4b0213e0f6ed286f8566dc7e204bb3458a5e6166530152c1dd82d554f0fd
-
SHA512
144cb5b29a7d7377f60573e4823d83bd483313c9eba6343ad86a32567d5350313fa4034128cb5baef7e844d8f0ae2adfac4924b0857b95dccbdf36df54b6c748
-
SSDEEP
3072:2pVxYDSf7jZbCsImZthQWPlRjsDkI/d49/vVS04ijG9oaPoM0QJGk87iq:2pVT5pUWPlRjsIn9lS7kooaPASGqq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e85f4b0213e0f6ed286f8566dc7e204bb3458a5e6166530152c1dd82d554f0fd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ