Behavioral task
behavioral1
Sample
IF1PXZtmsaZ0kuzid.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
IF1PXZtmsaZ0kuzid.exe
Resource
win10v2004-20220812-en
General
-
Target
IF1PXZtmsaZ0kuzid.exe
-
Size
2.3MB
-
MD5
b2ac8e0da2f2f8152825793e8bde6d08
-
SHA1
40345576c358da2977fc309ec87bd9997848e321
-
SHA256
48221b2502edd78ffb1474664a6ff020475f571fcd4216bdf321ed2ab2671f5e
-
SHA512
1db6fc28775acd856ee0c163918ba579a00b4f3fb28483022cce8f87340a39b23a789aa3ce6cf83c43b5ec5361c5bb90219cbc7ae6d85d04e53139e0a6017921
-
SSDEEP
24576:WMNtFZj9J4rIIUMRaM/v72MPcz0jP3fE4w2QRqCcXnWMutE5+:7j/cRNdPvEcnWlI+
Malware Config
Signatures
Files
-
IF1PXZtmsaZ0kuzid.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ