Static task
static1
Behavioral task
behavioral1
Sample
Xybgbeofht.exe
Resource
win7-20220812-en
General
-
Target
Xybgbeofht.exe
-
Size
48KB
-
MD5
bfa74263a6a71c90851fce876b6c21f9
-
SHA1
4d35bbac50f47b35fa1a5a5d999f819e22e9fcbb
-
SHA256
ba814cfaac0276ac7286b11316cee4b58db7421be488aa7bcc15ca8e9c97c4d5
-
SHA512
f49a56ed8a98466405ee540d25e0b17b8cd7475c44520d6da0812bcd13d36a9133534cd181c1470d1d895e8bc9c71bcb13108da280b31f44bd71cbdb224e17c1
-
SSDEEP
384:CBP1XkmI1WAG8tUHHojSe7i29JXYamLZnptYcFmVc03K:CBtXrAGFHHfJptYcFmVc6K
Malware Config
Signatures
Files
-
Xybgbeofht.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ