Static task
static1
Behavioral task
behavioral1
Sample
CguzyjoH6w0Mrok.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
CguzyjoH6w0Mrok.exe
Resource
win10v2004-20220414-en
General
-
Target
db0472f382a087a5c418209037bb62531f87288f5b7bcd7db3c744fa71db406c
-
Size
498KB
-
MD5
dac2f5bfd6234671e13771eabfd57850
-
SHA1
ca89ec61b8180a0732ea722c10fe04dcaf6b319a
-
SHA256
db0472f382a087a5c418209037bb62531f87288f5b7bcd7db3c744fa71db406c
-
SHA512
8a5de45a91eb5966f8aa7be036e649915f1ddbb746631b6e7e9009cf052b98f4cb2b77a5545ea09d9ec18030ae070c41ae74ade305d561533b710244a8e1d467
-
SSDEEP
12288:xnnXvH3sls00QG2HwJ0U87G7zLvdqWcmjUNGYAJSudXsp:xnnf6sh2HAZkOlXUN7AJxsp
Malware Config
Signatures
Files
-
db0472f382a087a5c418209037bb62531f87288f5b7bcd7db3c744fa71db406c.rar
-
CguzyjoH6w0Mrok.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ