Behavioral task
behavioral1
Sample
ef24d6b0d554484ce86d9c28c0c6f29cb3cd23998bd225312388fcc3db6d53be.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ef24d6b0d554484ce86d9c28c0c6f29cb3cd23998bd225312388fcc3db6d53be.exe
Resource
win10v2004-20230220-en
General
-
Target
ef24d6b0d554484ce86d9c28c0c6f29cb3cd23998bd225312388fcc3db6d53be
-
Size
632KB
-
MD5
a70e9fa826901d66f640ea36016b1ef2
-
SHA1
087ed9910798c57637e1c19b9762a99a2c12246b
-
SHA256
ef24d6b0d554484ce86d9c28c0c6f29cb3cd23998bd225312388fcc3db6d53be
-
SHA512
daab7267e026b4da39add72e24ff1c892ea0bf4783a8d3afbd93673adceb333615efcbfa614c67ad7003aea96657e56e4b88e542090cd048340fdbc0d508ace5
-
SSDEEP
12288:WwZwjFGYsqv9/6gFoo9zfINOyEeJsj79vx4IEwYAHh2noS:yFUqt6IQNO1xaOZB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ef24d6b0d554484ce86d9c28c0c6f29cb3cd23998bd225312388fcc3db6d53be.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 614KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE