Behavioral task
behavioral1
Sample
edefcb693bcd03a66ac6219486a787b6c2cbaf7da8ce9bf9f9a319111938dedd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
edefcb693bcd03a66ac6219486a787b6c2cbaf7da8ce9bf9f9a319111938dedd.exe
Resource
win10v2004-20220812-en
General
-
Target
edefcb693bcd03a66ac6219486a787b6c2cbaf7da8ce9bf9f9a319111938dedd
-
Size
144KB
-
MD5
0aa4b3b0cca79a9e7ac44f79aedeef50
-
SHA1
feea0dfa8a4984042c738c82d0b82302b4fdc51d
-
SHA256
edefcb693bcd03a66ac6219486a787b6c2cbaf7da8ce9bf9f9a319111938dedd
-
SHA512
62a04f6de731c9a1a6068b393762d7eaac443af6ed9709c64961feb83016742b5cb6556e392827d49674be4e72b6f5e4c016f9e46eec4beb4f5b8fd77fb9d9bb
-
SSDEEP
3072:1kttmgcQMnpIRa+eap9e97gxJr1/JxAIroutvt9P4z3mN87TWfS:1/gxopI8Kp0gjNEIroSsz3aQ0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
edefcb693bcd03a66ac6219486a787b6c2cbaf7da8ce9bf9f9a319111938dedd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE