Behavioral task
behavioral1
Sample
1e555dd6494fd6228cef14687699b7bd520b4a364695e25f1dd86d19f906b9e0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1e555dd6494fd6228cef14687699b7bd520b4a364695e25f1dd86d19f906b9e0.exe
Resource
win10v2004-20230220-en
General
-
Target
1e555dd6494fd6228cef14687699b7bd520b4a364695e25f1dd86d19f906b9e0
-
Size
604KB
-
MD5
5666fc4ea4956b71ccd641e4f46e8162
-
SHA1
ad812f57c59479370056706f6e39515045e56763
-
SHA256
1e555dd6494fd6228cef14687699b7bd520b4a364695e25f1dd86d19f906b9e0
-
SHA512
1ea3d5aa2cfcc11d25e71764ac3dea9e46486b8aa2595d769c0b1d6532243461c94686ce42dfc2aab27202425272f67c480aefe184bbeab6d2b797ac747ac147
-
SSDEEP
12288:sUG4XCWk9RfzNJFOXuOjxQVF6yM0wgoqd0PhZ+SLICS8nDyxNggL:VFlWTlM0wjA0PhZ+2ZjL0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1e555dd6494fd6228cef14687699b7bd520b4a364695e25f1dd86d19f906b9e0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE