Behavioral task
behavioral1
Sample
ecfe94b9eebed879f6d53d7e9021afd37e6068d43c9d53a08289de4502c3a12d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecfe94b9eebed879f6d53d7e9021afd37e6068d43c9d53a08289de4502c3a12d.exe
Resource
win10v2004-20220901-en
General
-
Target
ecfe94b9eebed879f6d53d7e9021afd37e6068d43c9d53a08289de4502c3a12d
-
Size
192KB
-
MD5
e26618ba1156cddeb479fb87935d3edc
-
SHA1
76cfa8931ee2477ba2704733a0f8cc69f6977f02
-
SHA256
ecfe94b9eebed879f6d53d7e9021afd37e6068d43c9d53a08289de4502c3a12d
-
SHA512
87cb5f19839eb0cf5eee8ab445c74804557253c83f45568744fba358bb68f496f03a2733e1e640096027b3fa7fcd476a4e8dbe217a817b0fc7b4981cfef1c71d
-
SSDEEP
3072:6mi+/dgy5Ef8doutaZZYCajVJ4tI/KxKL8HGRQZ+VcuiE0e6vty:6tSEf+oSaR6PiIHjRQZ+VIE0e6v
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ecfe94b9eebed879f6d53d7e9021afd37e6068d43c9d53a08289de4502c3a12d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE