Static task
static1
Behavioral task
behavioral1
Sample
r1QLPWfRySIThAz.exe
Resource
win7-20220812-en
General
-
Target
r1QLPWfRySIThAz.exe
-
Size
777KB
-
MD5
e995458027aeaf560bf2b6a8025c3cd3
-
SHA1
6fad8d96fa450a5e9c882977153bb629569f5922
-
SHA256
97637825f3b03f07721d1913a89386975ed4d9ef6b724cfabac27d4870e1c702
-
SHA512
9b7d0c63a5202ee4044a871949efaeb12c0262e5f9d60297c2e9477775c00778f943b7c3ede3e473f662348e598921c91574aab44429f8c01ecce32d6f053c5d
-
SSDEEP
12288:X2HvdWhj697z56/jGvuSgZb385xbNBuM2KW0IdcuOQUXS8NY:Echw/EmkZb6xblW0IHOZXNY
Malware Config
Signatures
Files
-
r1QLPWfRySIThAz.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 774KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ