Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-DEVOCHKA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-DEVOCHKA.exe
Resource
win10v2004-20220812-en
General
-
Target
66deee531f885754940a38e2e544ab549888771855373eb06f759b6e9d55e8b5
-
Size
118KB
-
MD5
6bca2d8570b8a5fe40babfd056b845da
-
SHA1
7ba25c6c12d6f6bf12a28ffc1c2fe49500aa3c75
-
SHA256
66deee531f885754940a38e2e544ab549888771855373eb06f759b6e9d55e8b5
-
SHA512
28458bce375317409552f991000ea609eb878b4c38e96ef672d92dfbacdb26f39604ab3a26e499dc928ce6f089f33e84bc6eafde4b4c230479cd33cd156f5a86
-
SSDEEP
3072:ZlTfMl7o9H/10ktQl6HVVcdTb7CHEEIfU089O2M:viiHN0kXHVWdTuhCUb9O1
Malware Config
Signatures
Files
-
66deee531f885754940a38e2e544ab549888771855373eb06f759b6e9d55e8b5.zip
-
GOLAYA-DEVOCHKA.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ