Static task
static1
Behavioral task
behavioral1
Sample
DUHK48M8.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
DUHK48M8.exe
Resource
win10v2004-20220414-en
General
-
Target
f2c8e12faa726152d4f592b0260ce25f5a95f85baee804fb30d0ea60c6b85a76
-
Size
1.2MB
-
MD5
2824fdd30fee03ef151482e7c3978745
-
SHA1
6cb3062c0d89ebf4408c1032754a6c46689d4092
-
SHA256
f2c8e12faa726152d4f592b0260ce25f5a95f85baee804fb30d0ea60c6b85a76
-
SHA512
22f60323993ad27180409132ec9e910257ab2be6bb2c545f7fd462513696f7635cfc5d444cee072a4b7439c54a8dce8fe77eabe70c70036e0a85690864251713
-
SSDEEP
12288:9t5ExLfYSDukPO5wHZcA9PUM5t4QHDHOBOJ5:98xjYS/Pv5c0ZmUz
Malware Config
Signatures
Files
-
f2c8e12faa726152d4f592b0260ce25f5a95f85baee804fb30d0ea60c6b85a76.iso
-
DUHK48M8.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 483KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ