Static task
static1
Behavioral task
behavioral1
Sample
RQF #00811-AL WASL.exe
Resource
win7-20220310-en
General
-
Target
RQF #00811-AL WASL.exe
-
Size
1.5MB
-
MD5
d870373e2ffd2b1788beaec4582f3f3d
-
SHA1
5553327f2dd0792f4d2f2171a8fb7122ecfb18fb
-
SHA256
64e046a94ea6f31a4a2cf9c77dc6e4f0d9e7455705668e8b354057c1d04f9b55
-
SHA512
b2726b8c92946e84749682dd5cb3f32e12a449f539bdfe3ae31c1c6a71974d0bcef61468e8564fa1447714fc2b62401578acf7db0ac54e312f6e88977b426bdf
-
SSDEEP
24576:nRGLcGCQqpodZT6xHwurnOqwvklglZeb:cbRqidZmauCqt2S
Malware Config
Signatures
Files
-
RQF #00811-AL WASL.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ