Static task
static1
Behavioral task
behavioral1
Sample
oAiVt1d10C1DAHS.exe
Resource
win7-20221111-es
Behavioral task
behavioral2
Sample
oAiVt1d10C1DAHS.exe
Resource
win10v2004-20221111-es
General
-
Target
oAiVt1d10C1DAHS.exe
-
Size
17.1MB
-
MD5
d194685c9b594285d108286568fdd3eb
-
SHA1
c096e367e87448aa8f55cf2dae12e928c12e5c7c
-
SHA256
cceb98fbaaab2630da98fdb90e537bd6b1f973edf1e5c4652086d837f58bc4cb
-
SHA512
122bb73ebecbe2167a7a8340fc967574aa08cd477eafcc264f4918c1537368a8d0b6778359451b5ec91b9d722e44559248a5d8e9418ca1a41ceb60506e373e6a
-
SSDEEP
393216:pu05jmw2YEFUxecrfPcEOEpK/5vUSrGH8zF5cKv9vzg8SumUkS9tFo:z3NdcdESUSrGczXcq1faOfo
Malware Config
Signatures
Files
-
oAiVt1d10C1DAHS.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 623KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 89KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2.1MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
./\. Size: - Virtual size: 24.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ