Behavioral task
behavioral1
Sample
efc926f90e15f7dec617e61490d5ae9d5132c878aed846e6c6d6c8fdeb640aae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efc926f90e15f7dec617e61490d5ae9d5132c878aed846e6c6d6c8fdeb640aae.exe
Resource
win10v2004-20220901-en
General
-
Target
efc926f90e15f7dec617e61490d5ae9d5132c878aed846e6c6d6c8fdeb640aae
-
Size
8KB
-
MD5
f38bc5c4f7e02dda3569f9dd526f8e7d
-
SHA1
54d00724a96f4516df2a96fcbc786aeae30dd2c2
-
SHA256
efc926f90e15f7dec617e61490d5ae9d5132c878aed846e6c6d6c8fdeb640aae
-
SHA512
df64c40c89bd9fa7b30d7323abd3fbcde6583ee16c150a98d8e125c903c5f0f98140c2c83700fb8d764a544debbdea956487c382f8032cb3936a596892aa8ef2
-
SSDEEP
192:uCutxBwJFE192PWf8/hCMGib3ipXP6xT+JcRJfIYIeUUvOUOmpwfvK:uC8uX/Wf8Jt1rgRcRJAJoCvK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efc926f90e15f7dec617e61490d5ae9d5132c878aed846e6c6d6c8fdeb640aae.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE