Static task
static1
Behavioral task
behavioral1
Sample
RYjUCPF6lK.exe
Resource
win7-20220901-en
General
-
Target
RYjUCPF6lK.exe
-
Size
1.2MB
-
MD5
2c736fb851f3a0b35d421dab609cbe12
-
SHA1
7eb7b5788500eb2d99a000b013ea10eb838c9379
-
SHA256
08f7726f98f8554c2150fa4b6e749a5552f4ffdec3bb17f3172e736aa5101002
-
SHA512
d1a3ef59c184648c603236422f510d05ba699a6d727b46c50a14e4e1a2236f9edad179978a30611a77e9158817a3e474b228925978f7ef665a840a61152eefdf
-
SSDEEP
12288:9yDzBI+YOlDNQpFPL3uZBIkfhzCueGLMRPuDv8AMmBoIFNuA6/M1ppa+Svlr8BCM:CDt5MgOfMwf/2hora3RQ+2
Malware Config
Signatures
Files
-
RYjUCPF6lK.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ