Behavioral task
behavioral1
Sample
ef8036f29b01c2bc74b211f83063742520cc04aa9c7204a8c6583fb820483f19.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef8036f29b01c2bc74b211f83063742520cc04aa9c7204a8c6583fb820483f19.exe
Resource
win10v2004-20220812-en
General
-
Target
ef8036f29b01c2bc74b211f83063742520cc04aa9c7204a8c6583fb820483f19
-
Size
1.1MB
-
MD5
c65a707d86845f901e3d169de0d30088
-
SHA1
8733b5534b68010b45eec4d65fb051370cc5668f
-
SHA256
ef8036f29b01c2bc74b211f83063742520cc04aa9c7204a8c6583fb820483f19
-
SHA512
5df35fe8f37b4d341f0de1c1f78cc3d5883d278d4b58eb93e94cdeb2125db0b8730e8cb39124fc8802a033ddd58b2869ad034ba501bf6b9370c7793bfd138770
-
SSDEEP
12288:z85c7Yk2KShNsrkzyo47oQN6bm5+65gTU/rFbDiq1FinJNzE81kLHBweHkGnWE0I:zGc72Jyo7QNepz8N6pKlwfGnV0eai
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef8036f29b01c2bc74b211f83063742520cc04aa9c7204a8c6583fb820483f19.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 704KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 526B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE