Behavioral task
behavioral1
Sample
ef686a2525bb6a4eca12790f95c7ce9a9788a8e633dbde3ae826735f282afea0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef686a2525bb6a4eca12790f95c7ce9a9788a8e633dbde3ae826735f282afea0.exe
Resource
win10v2004-20220812-en
General
-
Target
ef686a2525bb6a4eca12790f95c7ce9a9788a8e633dbde3ae826735f282afea0
-
Size
300KB
-
MD5
1e1caf854afe265b1bc88af1e5fca849
-
SHA1
da39935c1fe39a092f5f9c7428c237e9b87b7f62
-
SHA256
ef686a2525bb6a4eca12790f95c7ce9a9788a8e633dbde3ae826735f282afea0
-
SHA512
1fb6291ccaff904d999a1150b9d880c5f18e053570146a0bccf9ecd82a8eca0082fc946dcd181912803fa2f7749a19556a835cf016e4b32ece29496105b5d7d4
-
SSDEEP
6144:rLxFjizBJEPxHGtdKUb+Hd3vdGgD+WbJsJVn2oS7bJUXrez/o8OoSCE:/PiNNJKHd3vdJDdbJkgosz/2oS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef686a2525bb6a4eca12790f95c7ce9a9788a8e633dbde3ae826735f282afea0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 692KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE