Behavioral task
behavioral1
Sample
efa958a7c525153c318d1c5d5c2456c7a26a044db49a9cd7d707ec8405ece3f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efa958a7c525153c318d1c5d5c2456c7a26a044db49a9cd7d707ec8405ece3f7.exe
Resource
win10v2004-20221111-en
General
-
Target
efa958a7c525153c318d1c5d5c2456c7a26a044db49a9cd7d707ec8405ece3f7
-
Size
241KB
-
MD5
bb34da0092441474669dffc243597e0b
-
SHA1
059517474c866af60f8ccc0a8991610659f8b744
-
SHA256
efa958a7c525153c318d1c5d5c2456c7a26a044db49a9cd7d707ec8405ece3f7
-
SHA512
b78b89ddcda891d06c23d38ca2aa588a4ad7e1e3726a8f992ec96c1e0036bd85d100db4f03fed2288dc642b3028a00fe93dd7b5d6321dce483eb6a4fa971119e
-
SSDEEP
3072:uN0LwH/hUmnWRdRMtyyYyzwCv2gs38sJ8bOUQLBE1cWmqp:uNxPeMg/yzNGH8iEDmqp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efa958a7c525153c318d1c5d5c2456c7a26a044db49a9cd7d707ec8405ece3f7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE