Static task
static1
Behavioral task
behavioral1
Sample
m2pGYVcVuMtqUPm.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
m2pGYVcVuMtqUPm.exe
Resource
win10v2004-20230221-en
General
-
Target
m2pGYVcVuMtqUPm.exe
-
Size
1.1MB
-
MD5
84b6429e415d3d5f2b80a0e6396fab85
-
SHA1
fb49dc58638ddcd8bf46dc812a6d695070e3040f
-
SHA256
12501d44e7fb05dbd0412c7f7983bb4f5bd7be9a6d8333a8fe42d1c219a04056
-
SHA512
5e9e5f6d5510927ba2edbd422ad7194619b98223d42e4975a3ca865bf9acb5536120b4bf7bf35cb05d8d9a9f809594899bcf20c30d19b7aec2e6d441fa464ebb
-
SSDEEP
12288:sY7byUOLAiH/E5+19TzjlgTwl3Ldo/gkn2VNoy9QxV9ujLyl9Fe6al2j3hrhs:D7byUOLAr4NOwl3RCgkn2nkeL+S6as0
Malware Config
Signatures
Files
-
m2pGYVcVuMtqUPm.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ