Behavioral task
behavioral1
Sample
ef7bbeb7eb84416b44fb0af3ac1c7f415b32d09c0ee52dfed6b53c5621958d44.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef7bbeb7eb84416b44fb0af3ac1c7f415b32d09c0ee52dfed6b53c5621958d44.exe
Resource
win10v2004-20221111-en
General
-
Target
ef7bbeb7eb84416b44fb0af3ac1c7f415b32d09c0ee52dfed6b53c5621958d44
-
Size
1023KB
-
MD5
610d7f302e4d026f4282f9816108a768
-
SHA1
fe8760a6889cbf7832c1905fa2de2465f4cc8f47
-
SHA256
ef7bbeb7eb84416b44fb0af3ac1c7f415b32d09c0ee52dfed6b53c5621958d44
-
SHA512
0e3583c5fb011ae04fccf7f16f451850ba7699e5e6378bf6a36965900c5df4af7674fd7bf9d5d4108caa23a703c8eff96af08acc96e124306aed096af8cb0508
-
SSDEEP
24576:16WVT6WMaQwV6KSiWQm5ZZBLvcfpHUOLHoQ65/:16W4WvE/v5lLEfpHUOboQy/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef7bbeb7eb84416b44fb0af3ac1c7f415b32d09c0ee52dfed6b53c5621958d44.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 652KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE