Static task
static1
Behavioral task
behavioral1
Sample
$R2VKQFL.exe
Resource
win10-20220901-en
General
-
Target
$R2VKQFL.exe
-
Size
2.2MB
-
MD5
cf86399ee1428183d9c654b7214fc1eb
-
SHA1
435b5941b35eccb0f4dca62809c862e044fc492c
-
SHA256
7174af4e3c7128d9bcf99a9a76b0a816ab123f0d528cd5d1c2b149f235728b15
-
SHA512
5a9d857bcf113aa5777ea1737c36c128ca563b8e6a9ba819f8677e84bc727c11c94b66e2889c57fe8cf2ce1bea2a162abdff5c48a43a208e9664b9164aa6593a
-
SSDEEP
24576:6Mq/xqQ40LUQwQ5R+jqd+3c9jdSZAf8H//LmZxxpNUafhidjYm6dVJLgQCqO:TQ5R+9cvSZEenLufxidjYRLgQb
Malware Config
Signatures
Files
-
$R2VKQFL.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 775KB - Virtual size: 775KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ