Static task
static1
Behavioral task
behavioral1
Sample
24f3c5ad8e13986fd22e7b329121d7dece7caf4be1c5e3a47fc06648f4b80640.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
24f3c5ad8e13986fd22e7b329121d7dece7caf4be1c5e3a47fc06648f4b80640.exe
Resource
win10v2004-20220414-en
Errors
General
-
Target
24f3c5ad8e13986fd22e7b329121d7dece7caf4be1c5e3a47fc06648f4b80640
-
Size
164KB
-
MD5
39d66831c1f36497ade4dc9842b3412f
-
SHA1
fdb7c26d9f47c3294f88c23bad9e070ffb3d97cf
-
SHA256
24f3c5ad8e13986fd22e7b329121d7dece7caf4be1c5e3a47fc06648f4b80640
-
SHA512
840e5a9c4beb6db7ab341565e394d151c962aaeff8de52a230a792ce3ca97c13d4e04c014134fff379063b27eeb0ac9d59890057e8b8bebbe69ed155e1fa373b
-
SSDEEP
3072:WGYFrOdhfkQv9jrAprhFmyvEjQDKaUznxQaZpU/MG3obrC+d1mvbe+:QadFkMGhFjED39TZGYcvbb
Malware Config
Signatures
-
Sodinokibi family
Files
-
24f3c5ad8e13986fd22e7b329121d7dece7caf4be1c5e3a47fc06648f4b80640.exe windows x86
c88f20b29592f2107a629e815db6afae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z2iai Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ