Behavioral task
behavioral1
Sample
ef8dea48146ca17ac7a8bec0cd45707e2514b155f81586aa11398de09e3a7e18.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef8dea48146ca17ac7a8bec0cd45707e2514b155f81586aa11398de09e3a7e18.exe
Resource
win10v2004-20221111-en
General
-
Target
ef8dea48146ca17ac7a8bec0cd45707e2514b155f81586aa11398de09e3a7e18
-
Size
467KB
-
MD5
09cb13fbd1346bf5dd7f119df64d38fd
-
SHA1
500e145f1e9ce98a4cc09b3ce1b9a5b9b2eae9a7
-
SHA256
ef8dea48146ca17ac7a8bec0cd45707e2514b155f81586aa11398de09e3a7e18
-
SHA512
3f75f79e85f605545093f1bfc83ac19a9160de8f4f7bccbf2f219359349a6441dc207db7a4d3f17b93f38be07c1bb5296f9b6b408a44930c1e4c74f823f2cd36
-
SSDEEP
12288:d0IOi6qvEd/k8FNod7r13RIPuyCD+nStWDaweyFToS:SI7N8FNol9WuCwWm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef8dea48146ca17ac7a8bec0cd45707e2514b155f81586aa11398de09e3a7e18.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE