Behavioral task
behavioral1
Sample
Downloader_EFISCALI_040702.exe
Resource
win10v2004-20220812-it
General
-
Target
Downloader_EFISCALI_040702.exe
-
Size
342KB
-
MD5
6e73161b191781bc04a18c543e26e601
-
SHA1
8dd3bde71c5aad2d3dc981f937e498ae77ea12ad
-
SHA256
b01a6e93dff3c6285eac7adf7a3695da8ab02db1377e64f2dcdfb85ff999cfd2
-
SHA512
dbe4122ca6ab190d0d4a8798eb5f97c39b96c32ced1ab3d6f88cf61da3034291bc6e1e6e95ddb2355a7c802ffed3ad4e466526c3591ab88d321c53dcc73127a4
-
SSDEEP
6144:KOKsZhWTXYVR3vrMlxFfQUqSSYOLisyDdLcvi1T3XnpQiefO0EeWaZdtazoI+OL5:KVUozeYlxFfQUTdOFyh6yT36i8Ehutaf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Downloader_EFISCALI_040702.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 696KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE