Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Spy.MSIL.Noon.gen-ff56d2fbd1ea5ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Spy.MSIL.Noon.gen-ff56d2fbd1ea5ca.exe
Resource
win10v2004-20220812-en
General
-
Target
HEUR-Trojan-Spy.MSIL.Noon.gen-ff56d2fbd1ea5ca.exe
-
Size
444KB
-
MD5
bd9c112eb878796918ede7c93e61045e
-
SHA1
dd600a47afd3f39eae734b9143bf594988c7cb96
-
SHA256
ff56d2fbd1ea5ca58ba24a78d31bdd0a4c6fe178e3bd5cfccb77f239cdd12e0e
-
SHA512
6c41da41648f4e013db66f96db4878220a541aef1dcd026dd2ba218d76b440547cf233d833fe7ff2a13b718018a2d89b0aba4fc14c7ce9388cf3e2343c1be28b
-
SSDEEP
12288:3uG4SDo6UaCvh9qsa7dTOzyE+ank2JQ0WfZ7+qa:3N4u+h0JgzHRk2JvQZKB
Malware Config
Signatures
Files
-
HEUR-Trojan-Spy.MSIL.Noon.gen-ff56d2fbd1ea5ca.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 441KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ