Behavioral task
behavioral1
Sample
edf4372e89d4a117bb86d62dcf7dbaa31568911b2a128b24cc98a80f704aa0e5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
edf4372e89d4a117bb86d62dcf7dbaa31568911b2a128b24cc98a80f704aa0e5.exe
Resource
win10v2004-20221111-en
General
-
Target
edf4372e89d4a117bb86d62dcf7dbaa31568911b2a128b24cc98a80f704aa0e5
-
Size
148KB
-
MD5
c114556aae49ec5b5f04584c35856398
-
SHA1
6d2d7342ba00c8c50480eeaa952d49f5f51d0223
-
SHA256
edf4372e89d4a117bb86d62dcf7dbaa31568911b2a128b24cc98a80f704aa0e5
-
SHA512
be732bd632a5d11f4339e09aaccdfa646cb04a861b7545678075e26a2b3bf1668ab6ccd7d16f960ea89a1ac2b625ba297ce442f6447996847cf9ae78e1a21de9
-
SSDEEP
3072:NBE5c+Mvfu28+agaL5xt4ODf/J+Et+zM7Ll2iiT2s7/RqhoutA:EU3ObL/J+K7BqYhoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
edf4372e89d4a117bb86d62dcf7dbaa31568911b2a128b24cc98a80f704aa0e5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE