Static task
static1
Behavioral task
behavioral1
Sample
Phnsy34xvrz14.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Phnsy34xvrz14.exe
Resource
win10v2004-20230220-en
General
-
Target
Phnsy34xvrz14.exe
-
Size
19.1MB
-
MD5
06ff842d7cff24d6ed4ae5d397c178e1
-
SHA1
59330e39b8e6834e6d53447f9506948327ee8b09
-
SHA256
11be141f49e926b14d0a75101b38f7bfe2f203c843ae00696869c9c7cfc6d5e8
-
SHA512
14d2766e615de1461d6749e0445296512c5cf4e6b79b378e68a97cdc8023e485a6fccf006bff12f78a3528a85867c2282e22f4e8989079a8ee8769d99197586d
-
SSDEEP
393216:R474TeRbDGga5ElwxUfmXdqBYwNSBH+W9N2WrusE2zOhipAgsyS8sUKb3:a4Te9lwxUfmXAhQ+4NJTLzYuAf38sBz
Malware Config
Signatures
Files
-
Phnsy34xvrz14.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.8MB - Virtual size: 18.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ