Static task
static1
Behavioral task
behavioral1
Sample
Nqwyfkrohm.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Nqwyfkrohm.exe
Resource
win10v2004-20220901-en
General
-
Target
Nqwyfkrohm.exe
-
Size
4.5MB
-
MD5
e7f73efb6f431a4dcfd419ed2123e14c
-
SHA1
5136205743d67f0e03081d73802c920fc95fa4ea
-
SHA256
d6f73562c2013f0fe1ef835228ec4e7ff3fe5f9d19b698c4f68bd17b406e783d
-
SHA512
1a494f335799de0ac1f949e2a2944d53d75e4982a68da47ede71463ca771471fee9529803e9edc9181e142bfb3ee2b5f10b3cf69cc1604e4e957249cb6458364
-
SSDEEP
24576:Ib1xvFW77cwfRELxCGRN2qVtP+f1mcwj+sCbIDu4HWMZq6FDwe3NyMXHbjy9yLEC:
Malware Config
Signatures
Files
-
Nqwyfkrohm.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ