Behavioral task
behavioral1
Sample
efa078c7bc382add4e98ab5719c228919f4f2f3886c502ac080559881ccf65a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efa078c7bc382add4e98ab5719c228919f4f2f3886c502ac080559881ccf65a8.exe
Resource
win10v2004-20221111-en
General
-
Target
efa078c7bc382add4e98ab5719c228919f4f2f3886c502ac080559881ccf65a8
-
Size
196KB
-
MD5
1d42745fd074bc5408de6df3a7004bfe
-
SHA1
fb8795da86a256afcf3ae826992a0ddd0cd0d509
-
SHA256
efa078c7bc382add4e98ab5719c228919f4f2f3886c502ac080559881ccf65a8
-
SHA512
7742662dd177e70c7afa3731aaa9fecdcd77c0221da9c9141305c304fab7b008d3e703e58579aaa0d9912ea9e36e4ca0ece8d96dee2ae5b246b0c95b0b0885c1
-
SSDEEP
3072:uPde3qEXuWtbSx1MMXdaqnpRNmaLN80RTcu3+2ejG8xURAl:oe6EXuWg1MMMqnXYEN8f2ejG8mRA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efa078c7bc382add4e98ab5719c228919f4f2f3886c502ac080559881ccf65a8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE