Behavioral task
behavioral1
Sample
ef3c160dde75863e6adfa46dd9976ad5aacef3f526dc2e8dbcc55136e556bccd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef3c160dde75863e6adfa46dd9976ad5aacef3f526dc2e8dbcc55136e556bccd.exe
Resource
win10v2004-20220812-en
General
-
Target
ef3c160dde75863e6adfa46dd9976ad5aacef3f526dc2e8dbcc55136e556bccd
-
Size
1.2MB
-
MD5
2b70cfdf32fb09f9e01e838cfa0e4ca3
-
SHA1
9e0c788bfd8c34eee479872b544a58231c415c31
-
SHA256
ef3c160dde75863e6adfa46dd9976ad5aacef3f526dc2e8dbcc55136e556bccd
-
SHA512
a77f1f3b6ba878a68f042c474155dc39a0f69e9b7407d85cb36ed5c9db312c8f87a026773e3a8b3764b4514be399005e4aeb3ea0b00696900fac0bb84211ae36
-
SSDEEP
24576:Tt1F0XmgtXcQVqg4S65BPKS7K7SVfHYIjJSuPGC7YfpaN+gFa:TtQLXPVq7LKoK7SvY037Q1gFa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef3c160dde75863e6adfa46dd9976ad5aacef3f526dc2e8dbcc55136e556bccd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zwt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE