Static task
static1
Behavioral task
behavioral1
Sample
Yfnrxjtz.exe
Resource
win10v2004-20220812-en
General
-
Target
XDR_ResponseApp_CollectFile_ID00000016_20230220T080423Z.7z
-
Size
364KB
-
MD5
c286a04c929995e0d7bc9e1fd6962e5e
-
SHA1
c128931b5b6451e7fde264c574a720419ee88268
-
SHA256
971709cae1eba506c4276b8fa1bc456ec4ac74f6c4a7a97c3f81a1a86ba94348
-
SHA512
97d4c13925ac89bae29a77bf942f63d3cf030b8d3b71b5f29bdf24e1b7045aa31fec49a9ad73ef885321df3778e0e11533311bce8574845603061a49d6567e75
-
SSDEEP
6144:5rOYHMC69iPpAF/jgtN+8qxmU96jrBNlm0vj8dYNwjFPguyakCXvn20MjpXvvv:FvMC9AFS+8q0q6XBr7vjYpyaXXv20GX/
Malware Config
Signatures
Files
-
XDR_ResponseApp_CollectFile_ID00000016_20230220T080423Z.7z.zip
Password: w59osgqy
-
Yfnrxjtz.exe.exe windows x86
Password: w59osgqy
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 549KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ