Static task
static1
Behavioral task
behavioral1
Sample
salinan FhQD3l9vhmaFZ3L.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
salinan FhQD3l9vhmaFZ3L.exe
Resource
win10v2004-20220812-en
General
-
Target
salinan FhQD3l9vhmaFZ3L.ace
-
Size
448KB
-
MD5
66f7a39e9ed6fce17b24304fefe9014c
-
SHA1
6efbd9680dc254b27c0b738f8ed82d6618566bb2
-
SHA256
37ea8495af0513a701cecda94f6fddbe2595f8c560b2ce66bc8440ccb47f671e
-
SHA512
f6eb8187153ce6162b5e91d45ac95a9caefbb3f80c5464e41ae0d8f22e8a884c2cd66bb8fe3c15c74b95d4b3a0ffd71e1430f630d28c753a2c88b11612c42f1d
-
SSDEEP
12288:nrcKRspfRVAiYIRUnyyOTVWiPPVer7jQCAO:rcTRVA1pnyVVW6Ver7jn
Malware Config
Signatures
Files
-
salinan FhQD3l9vhmaFZ3L.ace.ace
-
out.ace.ace
-
salinan FhQD3l9vhmaFZ3L.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 479KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ