Static task
static1
Behavioral task
behavioral1
Sample
BKLULYOT.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
BKLULYOT.exe
Resource
win10-en-20211208
General
-
Target
00d0dcc155b889107ad32e90f8172490dc32280cc62e762bfa5e7deecea1099d
-
Size
1.3MB
-
MD5
e04d958c16df00046fe516e6ea187321
-
SHA1
c142d74d6d585550af9d810f73faa8418d6045a5
-
SHA256
00d0dcc155b889107ad32e90f8172490dc32280cc62e762bfa5e7deecea1099d
-
SHA512
8b3dc13e2afe63d6129849adb6b36e55a847210056cba2153988b4c4c036a2e14c00b1d50af1c34a0762e9862461f9fa8f1f796d05064eca97b1a1e939962942
-
SSDEEP
12288:I+3V1iARDZ1Wv7GFdc6v8cnr3pB7PeDhxYjAKJtWcpEL36U:I+FrZ1Wv74d9lTrbeDhmxJtWf36U
Malware Config
Signatures
Files
-
00d0dcc155b889107ad32e90f8172490dc32280cc62e762bfa5e7deecea1099d.iso
-
BKLULYOT.EXE.exe windows x86
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 366KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ