Behavioral task
behavioral1
Sample
efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849.exe
Resource
win10v2004-20221111-en
General
-
Target
efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
-
Size
536KB
-
MD5
092fbe119af659bc1634cb3d79f94509
-
SHA1
1077b24731f26e1452b582ef9051537ea4bf7c6a
-
SHA256
efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
-
SHA512
0d2fff764acb7f261d8e22d823d75b6d070746970e357f09056e41a333d9b44b42f7f00235d160606a6be415e0dd077ecd7443e115d4f8e223698b525db422b3
-
SSDEEP
6144:e/IRL3N/LoBZEPrfwf7VcCvpICvHHnlhWzxwgIJPLNGTfKe8i/q4k2JgLKQc0:e/IRBLoBArIJoxwgIJPLNYPvk2FD0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE