Behavioral task
behavioral1
Sample
ef33767d2ce0a213e9bab70aeeb1704fe063f1f705d6b4f4775c7a09beff7a89.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef33767d2ce0a213e9bab70aeeb1704fe063f1f705d6b4f4775c7a09beff7a89.exe
Resource
win10v2004-20220812-en
General
-
Target
ef33767d2ce0a213e9bab70aeeb1704fe063f1f705d6b4f4775c7a09beff7a89
-
Size
1.1MB
-
MD5
f529dbbab4846ac38bef4c243c37225f
-
SHA1
3e5092ceb96fa429978b197892e6650b9854f725
-
SHA256
ef33767d2ce0a213e9bab70aeeb1704fe063f1f705d6b4f4775c7a09beff7a89
-
SHA512
f757e19724a326a734d9cb949b5c9ee5986f1a55a0829fe9351805472c21e42d00226e4d4d735890312efb3f7a92a1219bb881b3293d98b6b260f768bd825f7a
-
SSDEEP
1536:3Mw/s/tEv879SbTwXit5FT6zIakzzGhKENs4IAc5nEwKzeTX7NQh:gE2YTwXitHWbk3GNmhA7ANW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef33767d2ce0a213e9bab70aeeb1704fe063f1f705d6b4f4775c7a09beff7a89.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE