Static task
static1
Behavioral task
behavioral1
Sample
odT0zoYLJiNUQXd.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
odT0zoYLJiNUQXd.exe
Resource
win10v2004-en-20220112
General
-
Target
32c7304278be2831eb34d6d28f81badb6f743eb656d2b86eda764291d5eb91cb
-
Size
695KB
-
MD5
963be4b69fd4e6072b6360700097cd91
-
SHA1
4ff479fa48d100a74f4610dab8853d1e1b754308
-
SHA256
32c7304278be2831eb34d6d28f81badb6f743eb656d2b86eda764291d5eb91cb
-
SHA512
c3cec52e7b2ac8bcca169265908e77c13350762ff493aa6aba236201d4c484db53c8c6c70e8842022b49ccf37e3c0eb15c85966d4c4bfcb0be1ac6d0dbb3b52e
-
SSDEEP
12288:1VUfURD9LZGn6shozD5WpdJXJVt3JQzulHce8NsmnCutktUXQPn9qc2:f+UKn6shUD0pd5J72uKecsmV2UAFqh
Malware Config
Signatures
Files
-
32c7304278be2831eb34d6d28f81badb6f743eb656d2b86eda764291d5eb91cb.rar
-
odT0zoYLJiNUQXd.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 898KB - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ