Static task
static1
Behavioral task
behavioral1
Sample
SPIER.dfh.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
SPIER.dfh.exe
Resource
win10v2004-20220414-en
General
-
Target
SPIER.dfh.exe
-
Size
971KB
-
MD5
093bd5d66d0c00dd8460371d8a7c6645
-
SHA1
1f4fea0428b350a4ae31b1b77248a74f039e3d22
-
SHA256
6e6e55b8b80a3232b0059f0aab756936505691e6b7472eb5ac7d364f7623c4e1
-
SHA512
11c33dffa91cbc51529002704ca61fc5bf524124cffd5f7325c376c5214012792520bf1d45666f58d868bdc9e4250c8fc4c9afab6eb079de50b746340cfd24fa
-
SSDEEP
24576:d2D8HRUMUuRrC3CrKebAtYjAIDUpO/43rKFq:d2oxUYRGSlAeU4I
Malware Config
Signatures
Files
-
SPIER.dfh.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ