Static task
static1
Behavioral task
behavioral1
Sample
tS1DhARF4HLvLA6.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
tS1DhARF4HLvLA6.exe
Resource
win10v2004-en-20220113
General
-
Target
tS1DhARF4HLvLA6.exe
-
Size
466KB
-
MD5
d88a53faab7f22298b69de606e38894c
-
SHA1
6472dc71a4b6d1cb508d22676656b99e2ee2c3f9
-
SHA256
e001e6df4c7f72792f62e8a6c85f7061589071eae796aff8c96343a25b9641f8
-
SHA512
92bfc7130b0e2fb93da0ec1bb044198d2f7b3aa8c00b878ed95f312e597542ad7c84f13bb13fca369a4412181b674f3640c1b4eea230c343a0ea27b157d7b2c0
-
SSDEEP
12288:D3TVO7Jg9RtuonfNeKRRgE7nwRFZqWNcNeWrjBTh:PVOVgb0tiRgE7w3ElBt
Malware Config
Signatures
Files
-
tS1DhARF4HLvLA6.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 463KB - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ