Behavioral task
behavioral1
Sample
I_LOVE_DVT/dvt-SonarQube-KeyMaker.jar
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
I_LOVE_DVT/dvt-SonarQube-KeyMaker.jar
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
dvt-11th.2015.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
dvt-11th.2015.exe
Resource
win10v2004-20220901-en
General
-
Target
1064e13ae8eda8254ec8be4477842e0521141df849905e94e04b13ea2a086bcc
-
Size
3.5MB
-
MD5
9eb3b32286e2806801ac1c467a332aea
-
SHA1
db11db39e1bbbf726763e7708989d8e44f56c5a4
-
SHA256
1064e13ae8eda8254ec8be4477842e0521141df849905e94e04b13ea2a086bcc
-
SHA512
49fe826dc533bf4a6c574704622ec1dea78bdfcc8c02bcb91e13442dde9067df153320865d8e26a923a1e3f6ac7b45f6ec23a192d0528db2f50d33af2f319f71
-
SSDEEP
98304:SS7AOOIe4QcV4a6GQzDFjviVpEvSGsMTNAnURUbVs:97AOOJ4QMEVuH4TN5UbVs
Malware Config
Signatures
-
resource yara_rule static1/unpack001/dvt-11th.2015.exe aspack_v212_v242
Files
-
1064e13ae8eda8254ec8be4477842e0521141df849905e94e04b13ea2a086bcc.zip
-
I_LOVE_DVT/dvt-SonarQube-KeyMaker.jar.jar
-
__MACOSX/._I_LOVE_DVT
-
dvt-11th.2015.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 114KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 205KB - Virtual size: 12.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.modplug Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dvt Size: 366KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
dvt-green.png.png
-
dvt.nfo
-
file_id.diz