Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-TOPLESS.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
GOLAYA-TOPLESS.exe
Resource
win10v2004-20220812-en
General
-
Target
20a653a3d489a582e3cbe239882dc1d6bfe3a7975eddfab0a985a1e673c126ff
-
Size
91KB
-
MD5
581d04f6514f945780f1cb1d1626fcbe
-
SHA1
567ea8ce55fb26c66b0cf03f89e93aeacc6e4c55
-
SHA256
20a653a3d489a582e3cbe239882dc1d6bfe3a7975eddfab0a985a1e673c126ff
-
SHA512
aa3a7fb5f0058cd716f7b52f0812245b1f53adbb53c6b0671ce138bc05d47956d515a9b0661f8eeb557bd24e5105a905feeb34bd89e63e3cc46a68c9b8271165
-
SSDEEP
1536:uUnVN5HOHUEs6iqcuyIJ4fnb07w3317NIf8n5zBWOurXjBCl9b2WGA+ZetAoSaC3:uUnLYCq/Fufnb07YO86X7jcl8WMtaC3
Malware Config
Signatures
Files
-
20a653a3d489a582e3cbe239882dc1d6bfe3a7975eddfab0a985a1e673c126ff.zip
-
GOLAYA-TOPLESS.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ