Static task
static1
Behavioral task
behavioral1
Sample
sayd.exe
Resource
win10v2004-20221111-en
General
-
Target
sayd.pif
-
Size
10.5MB
-
MD5
e2696ac6f11bb63e2ad5d63120f0d653
-
SHA1
3a2071bc054c4a41d6559f5d6c61cd64c33d8ea0
-
SHA256
c4de8d8476c23a834b22fc144e82d3ef5ef33f51fecb3204ebfbad0961916953
-
SHA512
cf365f148288975fa225c89f1a699dbd6038df9241968968c9adc5ef8d1b6edcbb98d42ab48822eed3820d004785585613d04023f1e0a28fc4ebf36ce835ebc4
-
SSDEEP
3072:+lTKQ91GGl7fdxapcIM5ID9vdOq6+ogT59YhOBX5bEADm:wjUcTGDRzT59wgX5j
Malware Config
Signatures
Files
-
sayd.pif.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 386KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ