Behavioral task
behavioral1
Sample
efa04ef76af6aeb3cab0ad262361df15549d98ef3a07526a5887d74db20489d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efa04ef76af6aeb3cab0ad262361df15549d98ef3a07526a5887d74db20489d2.exe
Resource
win10v2004-20220901-en
General
-
Target
efa04ef76af6aeb3cab0ad262361df15549d98ef3a07526a5887d74db20489d2
-
Size
73KB
-
MD5
11e474d2921a8112f18170a3a0c20c87
-
SHA1
8b1f1c5aa6040995a4a350c9db465f409142d451
-
SHA256
efa04ef76af6aeb3cab0ad262361df15549d98ef3a07526a5887d74db20489d2
-
SHA512
32d93114cdb46fd0a140ac7605f69200cda049804fa2c429689d800363360a0f51b19b6f61f1f98cd5d941c966b36443eff66ad959476c1516776f2ca9f1de7b
-
SSDEEP
1536:6DjUsYg2MP9HezBq/HtWlHiityUi2Ug3DgvHQDpir1rKSEsWFYsOLWnouy8f:6DAsz3HoqVSbFPcQ1wKjFImoutf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efa04ef76af6aeb3cab0ad262361df15549d98ef3a07526a5887d74db20489d2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE