Behavioral task
behavioral1
Sample
1efcb4d98521496a76ad4fdca2cc5409287630314870e3f0b40bef73ba2affc0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1efcb4d98521496a76ad4fdca2cc5409287630314870e3f0b40bef73ba2affc0.exe
Resource
win10v2004-20220901-en
General
-
Target
1efcb4d98521496a76ad4fdca2cc5409287630314870e3f0b40bef73ba2affc0
-
Size
253KB
-
MD5
a51a0420e28042184bf5ee53fbb59d0d
-
SHA1
dfde5764cee0039dd3ea9c3d2556bff5610e95e4
-
SHA256
1efcb4d98521496a76ad4fdca2cc5409287630314870e3f0b40bef73ba2affc0
-
SHA512
f0e485eccdd0460ae2ff29f3cf0d9cbcaec05612ecb91bebb5dba4d4a4e93b9506fb66892bed66eea311e5758ccc8688a7de5c688e38ad9a442edcf81ee63354
-
SSDEEP
6144:bbtroggcHLwQHPuJAkHXBJeXr+sZu9S2D52/LE:3S8LwM8HXBJuxB/L
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1efcb4d98521496a76ad4fdca2cc5409287630314870e3f0b40bef73ba2affc0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 247KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE