Static task
static1
Behavioral task
behavioral1
Sample
07a2e5f21264d00977be94980f6fa46c0e955b7cf312092634a2d3f1bbd3c39e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
07a2e5f21264d00977be94980f6fa46c0e955b7cf312092634a2d3f1bbd3c39e.exe
Resource
win10v2004-20220414-en
Errors
General
-
Target
07a2e5f21264d00977be94980f6fa46c0e955b7cf312092634a2d3f1bbd3c39e
-
Size
164KB
-
MD5
01301b7e7aea87b2d23495498e67c58c
-
SHA1
bdab9012d9beace67af9ba590764f0ea8ddda4ff
-
SHA256
07a2e5f21264d00977be94980f6fa46c0e955b7cf312092634a2d3f1bbd3c39e
-
SHA512
cfc22be78cc207523019cf917b03b75f9346c1c408c0d2a2f6b18a89f0ad83757e638b44024638c9bcbf8d1b6b2df0aa899826d49e81bfe14e74f0a247eef477
-
SSDEEP
3072:ffYWjswg4fQ+Q4fm8jX5IXzs+M9VQHDO/Qkh1c/5n:ffYWAw9fLrmwIXo+M9VQHDq/q5
Malware Config
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil sample 1 IoCs
Processes:
resource yara_rule sample family_sodinokobi
Files
-
07a2e5f21264d00977be94980f6fa46c0e955b7cf312092634a2d3f1bbd3c39e.exe windows x86
c88f20b29592f2107a629e815db6afae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gjgc2 Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ