Behavioral task
behavioral1
Sample
eff117c450233eff40ac5a38c57aec31200ef1aa2b7ca59097a5834ef83f6224.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eff117c450233eff40ac5a38c57aec31200ef1aa2b7ca59097a5834ef83f6224.exe
Resource
win10v2004-20221111-en
General
-
Target
eff117c450233eff40ac5a38c57aec31200ef1aa2b7ca59097a5834ef83f6224
-
Size
563KB
-
MD5
f1be4ec1d9b641894d4e1adf74a5385e
-
SHA1
976331e112e7c67544a4dfac9346f3101ffee003
-
SHA256
eff117c450233eff40ac5a38c57aec31200ef1aa2b7ca59097a5834ef83f6224
-
SHA512
4f8a603a0d6d69b9edccf69493a88b52456593ceee5ffe65e36a82ffe758e317637f61a38f5e5b71abb361d04f91cb0031160a26c62ea84ebcd1920cc3883097
-
SSDEEP
12288:GdkQwJYxiWZ44UDqTNda/OXfVo9H66HYohA/zB+:Qk1/OUWnU+oDH/+/zB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
eff117c450233eff40ac5a38c57aec31200ef1aa2b7ca59097a5834ef83f6224.exe windows x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 968KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 545KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE