Static task
static1
Behavioral task
behavioral1
Sample
ZynTap Executor.exe
Resource
win10v2004-20220812-en
General
-
Target
ZynTap Executor.exe
-
Size
708KB
-
MD5
4348f6fca8b851ec4e6eaac758843c7d
-
SHA1
96d3f67be8ff477e42af5f1027ea65eae219bdd4
-
SHA256
6b26a26176f74e1eed9b151cfc15bc630dc78615b9959a490007443d7bcdbe1c
-
SHA512
6ff6d4a7d80e95e1cdfea0a5ee9bfa9a358d188c826aeafa4c6bc5fbf85c26a7625aa8cbf1d816e05b4649ef778a1136849d74b450edc367eb4d861455d22f52
-
SSDEEP
6144:ccOGqb+chVnchV1ZGTGAoBXPCmgSr3xa0nh6JhnlNi+d3U1sWp9lchV6cLw:jab+Q08TLoBXPCGnhARh3sl9
Malware Config
Signatures
Files
-
ZynTap Executor.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ