kvigcdmica
Static task
static1
Behavioral task
behavioral1
Sample
73c491af7776f0090a675f3cf7960212.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73c491af7776f0090a675f3cf7960212.dll
Resource
win10v2004-20221111-en
General
-
Target
73c491af7776f0090a675f3cf7960212.exe
-
Size
42KB
-
MD5
73c491af7776f0090a675f3cf7960212
-
SHA1
1253451977624a34ce6d332fa9f210ea1b10ce2f
-
SHA256
30c801e5d8e3f1b2c825623c2ab3e28a8cf877ca69078a91375904fb013b34f8
-
SHA512
a195427d995e05a331ec94f5cf2b2a85b8185b48aaf1d17f1389e38ef6a2531aab3b30fd67f52933dfd64dcbbdaba0667c04bf99b1709efc84fb3166f8524c02
-
SSDEEP
768:RMN5ulpZZhHHvRGlmfyeSOdyILvRlyIJJcZ:RMeDCmKeZdZrQ
Malware Config
Signatures
Files
-
73c491af7776f0090a675f3cf7960212.exe.dll windows x64
6cb7c652105d9b2b2ff7b5309e0e37cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
GetCurrentProcessId
Exports
Exports
Sections
.xpbrz Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.otqfj Size: 512B - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rnnrj Size: 512B - Virtual size: 59B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odqgk Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE