Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.MSIL.Diztakun.gen-e133175b822a5469edb6dff81734848124470374a57bcaa8d273f0e2e08d2d95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.MSIL.Diztakun.gen-e133175b822a5469edb6dff81734848124470374a57bcaa8d273f0e2e08d2d95.exe
Resource
win10v2004-20220812-en
General
-
Target
HEUR-Trojan.MSIL.Diztakun.gen-e133175b822a5469edb6dff81734848124470374a57bcaa8d273f0e2e08d2d95.exe
-
Size
88KB
-
MD5
a347c70d5dfbdbed4c629836d6812e0f
-
SHA1
1e4b3544bd8d1b3734b193139f9e74df120493a8
-
SHA256
e133175b822a5469edb6dff81734848124470374a57bcaa8d273f0e2e08d2d95
-
SHA512
4c21418b162b6b34dd40d70244e72e244954a502a5a62b49c3394d923934d6eab3ecdf29151adbcbc530c6239d93dd08e8aca2d56d89eb002af1b0c6d813e056
-
SSDEEP
768:TPKf0vy5jtGgRhusj9ROUpDP6epy7ysBqiaFM+MI37I3Ncftgcp2ZFptYcFtVc6K:j5vy5jtpREW/py7AUB3OgOyFptVcl
Malware Config
Signatures
Files
-
HEUR-Trojan.MSIL.Diztakun.gen-e133175b822a5469edb6dff81734848124470374a57bcaa8d273f0e2e08d2d95.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
]2Iu/q Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ