Behavioral task
behavioral1
Sample
efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124.exe
Resource
win10v2004-20221111-en
General
-
Target
efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
-
Size
906KB
-
MD5
209973c43f93eb4ff7de97c35730ba01
-
SHA1
08e4c1b549a802ba4ad0760848a9085dfff607e7
-
SHA256
efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124
-
SHA512
034de7d4d570ab0dc40fd0992e26542a91bb759414c70979b918af0099a916b30e9760f1e2e4880fc50898e5d47f3787fcc9ebfaa4782f76207c1b7c5d3b3b6d
-
SSDEEP
1536:gR2LfYJK++++++++++++++++++++UAgo1eo1UW/JUM1XZS:gRRo1eo1jKM1XZS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
efbcf80f5b316dabbdc70b1f42b030483a2f2328ffac6b05324e0ddbb6263124.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 876KB - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE