Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.Agent.NDY.tr.dldr.20579.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MSIL.Agent.NDY.tr.dldr.20579.exe
Resource
win10v2004-20220812-en
General
-
Target
SecuriteInfo.com.MSIL.Agent.NDY.tr.dldr.20579.exe
-
Size
20KB
-
MD5
1fd1cbba65f148934140e5d58dfb32cf
-
SHA1
dfa8d4c0927dc5966179cf2826756a9d09b4bd35
-
SHA256
ce64e9ecb6eafed95cc5fbe2b1f7eb84046a6f9cf93c344724fe7052b97a67eb
-
SHA512
9ab58ed1aa975be804e6313e92b917ebd2e2deb8000adaf5cacfde5018cbcdd03be309e5a31a9acd24921ee27983ecc86fcada6ee1880ba47d26134172b043f2
-
SSDEEP
384:lN0EpQBA8gp/Ni6C0kZHmyL/9fZyWOpF8stAbclQLvOVcfvUk5SG2vHJ:oEpQBd6iB0CF6ll+AliwWvUi0p
Malware Config
Signatures
Files
-
SecuriteInfo.com.MSIL.Agent.NDY.tr.dldr.20579.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ