Behavioral task
behavioral1
Sample
ef72cc73a029ac6a7dda18c6b27026ffe6c7bfdf379a8adb295d90993bdb3726.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef72cc73a029ac6a7dda18c6b27026ffe6c7bfdf379a8adb295d90993bdb3726.dll
Resource
win10v2004-20221111-en
General
-
Target
ef72cc73a029ac6a7dda18c6b27026ffe6c7bfdf379a8adb295d90993bdb3726
-
Size
24KB
-
MD5
f1bf64a28bea72d3daf2aad3f3329355
-
SHA1
6326f214fac87117670c19d80a4fe43d2a520161
-
SHA256
ef72cc73a029ac6a7dda18c6b27026ffe6c7bfdf379a8adb295d90993bdb3726
-
SHA512
2bec43d83f6ebd945d20c14433b34b2a2f246b7060978edb7c35ea6afb272c2c27504556b5086daac16b6e4c75502250480143fc55ede84437731e4397989a31
-
SSDEEP
384:8opcbsm+OkzpcuSToPH6fa/jFcc7IUaUPr+fYv7PRcoLlYWku/s34ZdSMQFjcxtJ:8oQsm+VprSToOAxc9UP3bRsu/s34tYc1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef72cc73a029ac6a7dda18c6b27026ffe6c7bfdf379a8adb295d90993bdb3726.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 1023B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE