Behavioral task
behavioral1
Sample
e4b68c46b4f4efcd75895cf97e7f142cb91e31def61426cc2ef94f78f25fa13b.exe
Resource
win7-20230220-en
General
-
Target
e4b68c46b4f4efcd75895cf97e7f142cb91e31def61426cc2ef94f78f25fa13b
-
Size
398KB
-
MD5
91eed7b69e6447b0bb216f5e3af174f7
-
SHA1
d152b37f15f203c5c24332ada544ba400e003603
-
SHA256
e4b68c46b4f4efcd75895cf97e7f142cb91e31def61426cc2ef94f78f25fa13b
-
SHA512
eca588bf18c5588df3354381b6d33bbe6bbbfc8fe899335a25b8b1505799b53c4e62e2058b0a5bf9430d6bcb2234de265df0d0599b14809a832068b2e593c586
-
SSDEEP
12288:1ch6CP5aiziS4om3dOFh0uGuBjAi1QsoV:eUCP5zzHSUErioV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e4b68c46b4f4efcd75895cf97e7f142cb91e31def61426cc2ef94f78f25fa13b.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE