Behavioral task
behavioral1
Sample
DETCEFNINIW.exe
Resource
win10v2004-20220812-en
General
-
Target
DETCEFNINIW.exe.malware
-
Size
813KB
-
MD5
194e2d064a67aef1574a695ebe55e488
-
SHA1
91c9c98d8cd00bed615ef22571e6df70fcffcfb1
-
SHA256
f15e82271d0e477bf415744e5fca2a61d74f1c7eb65389e52363f564b3c0e319
-
SHA512
c780fe9231f41c45cb1802113fc0b8412e28132236e333de0884ea2131e04363cf64ca9fc1d6213197ef2d277e1f16ea616c273a21e5343eb96eac713ba809bd
-
SSDEEP
24576:NyLZuG7Enkm3jEIl6ip97QdDvrxB4qZCZj:6cq01zj2PLZ4j
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
DETCEFNINIW.exe.malware.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 570KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE