Static task
static1
Behavioral task
behavioral1
Sample
FYTjWPH.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
FYTjWPH.exe
Resource
win10v2004-20220812-en
General
-
Target
FYTjWPH.exe
-
Size
443KB
-
MD5
2ad2fb82d9c4758a36e93b09cd493728
-
SHA1
7d0c4f980747c963dc5e22119be2757da8925d73
-
SHA256
3ceccd433b0a7100f3152546cab0703212811c335b6b1eb4e795d0bb47461761
-
SHA512
8c003a7e6903491fdde48f602257ef54561ea3725aa1b49595879dcb85391e80c8c3513ff3e6bd8f3bb94d097f03a707f1386218f0310be3d4dffb7afb775ed2
-
SSDEEP
6144:bT6pkPwmgHMxP0QvqklNneSNaZ+3Ii8QQAnKvQR8YTmchNQx16MBnbqi:f6hmgHMlAk6SNudhvQGYjPZi
Malware Config
Signatures
Files
-
FYTjWPH.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.APX0 Size: - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.APX1 Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ