Behavioral task
behavioral1
Sample
efbb4c15ae13428f5727adce6892768b10b522c3066ea42ef6363d4e8e692c79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efbb4c15ae13428f5727adce6892768b10b522c3066ea42ef6363d4e8e692c79.exe
Resource
win10v2004-20220901-en
General
-
Target
efbb4c15ae13428f5727adce6892768b10b522c3066ea42ef6363d4e8e692c79
-
Size
57KB
-
MD5
ad9b88295dafd1c1de3ba417d6bcd987
-
SHA1
c9caa05c665dfa15a6ce4907bfc8d6d3742cb160
-
SHA256
efbb4c15ae13428f5727adce6892768b10b522c3066ea42ef6363d4e8e692c79
-
SHA512
91aed7b74d73e749be738f3de76ddb6f4571511afcdad21c9e44d4e6d8c6472356eedb027b47f494de530991af6126d960cf42c077423f4f763baf924e4505fa
-
SSDEEP
1536:WqGG3tezS9G9pgJ/o/bK7xsIN5kuu/1pRMU4Yd+1W35Vyt:79ezSqpgJg/m+Irk4Wit
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efbb4c15ae13428f5727adce6892768b10b522c3066ea42ef6363d4e8e692c79.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE