Behavioral task
behavioral1
Sample
efe15a99ae0acaea67539ef8646612a2d2c6b2114ab70d6863e92fef3af1d44c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efe15a99ae0acaea67539ef8646612a2d2c6b2114ab70d6863e92fef3af1d44c.exe
Resource
win10v2004-20220901-en
General
-
Target
efe15a99ae0acaea67539ef8646612a2d2c6b2114ab70d6863e92fef3af1d44c
-
Size
423KB
-
MD5
895936acfa78f2a953a917f1048acdd0
-
SHA1
d871bd33ca30aed1496bd4ce6525c4ea30553fd0
-
SHA256
efe15a99ae0acaea67539ef8646612a2d2c6b2114ab70d6863e92fef3af1d44c
-
SHA512
c9d2f6901bde36796601b4f5a70c3cf01f05fb079c0c31bcf0a19d71c48b939f486898bafb0d61bd7e4410d74a78544f1bcad6104e2428b5156c1ebf775aa969
-
SSDEEP
6144:Ns9XgA/96embbWeJvTT4V2jWpZV9Odt5XWSp0nUfet8RoDAG2Zm8WNVM+NAg0l3:MgAl6e+bNVSB+1WhUfezZ2ZfWNK+363
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efe15a99ae0acaea67539ef8646612a2d2c6b2114ab70d6863e92fef3af1d44c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE