Behavioral task
behavioral1
Sample
efe838c66348214f8f9657714553e187b74e23522f6d7de9fcb425bd31bd178c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efe838c66348214f8f9657714553e187b74e23522f6d7de9fcb425bd31bd178c.exe
Resource
win10v2004-20220812-en
General
-
Target
efe838c66348214f8f9657714553e187b74e23522f6d7de9fcb425bd31bd178c
-
Size
443KB
-
MD5
6752d58265cb25e4ce78b4efe07b5439
-
SHA1
729b88718c2c92c42cd7338b6ea7cf1da94e2caa
-
SHA256
efe838c66348214f8f9657714553e187b74e23522f6d7de9fcb425bd31bd178c
-
SHA512
0613df742ae97b9969af567c4041f6c25ec07a96b65b9bce21047808b2ae35fbd1d83cef886c6a48f96e268096d037c3939d44f47c6be128d2bd3e685ff3d927
-
SSDEEP
6144:taY7Mi22RXwfjUni3znFvM8DXHfRxzYkGddRDGN2UyEhXl/ju4NWV/prphORhkb0:tInGO28Dp6XdJ+l/ju4w3pzYOffP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efe838c66348214f8f9657714553e187b74e23522f6d7de9fcb425bd31bd178c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE