Static task
static1
Behavioral task
behavioral1
Sample
Fly.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Fly.exe
Resource
win10v2004-20221111-en
General
-
Target
Fly.exe
-
Size
2.0MB
-
MD5
b84de037868a4478d8fd2aa4eadab1ae
-
SHA1
0c42d5822185a1183a8c7a25c301e80fbdf12033
-
SHA256
47befc5c8d57f2b9b6da77ae1567b70d0603203b1de990392028b95b99783836
-
SHA512
47be135875a3accf2f6345eba802d00e46a4f0061aa5a46e47a32a429d191bd730ba80187d1f62992886b180a52369782c7bc3b160360c76483933de88e6026c
-
SSDEEP
49152:Md6+1uwde1YvJbyT2Qd6+1uwde1YvJ4yTw:MwGuwIcQwGuwIf
Malware Config
Signatures
Files
-
Fly.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ