Static task
static1
Behavioral task
behavioral1
Sample
z50Iowk170GoWzS24q.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
z50Iowk170GoWzS24q.exe
Resource
win10v2004-20230220-en
General
-
Target
z50Iowk170GoWzS24q.exe
-
Size
1.1MB
-
MD5
303cea223e16a4649cad0d2130262997
-
SHA1
2a8b0e7ba4d3868f309bec3f55f5777f6b6fd2cd
-
SHA256
615b9cfb19070c6aa8ec0f8a80147335bc5b276c135f1fe133544c2de0efe83f
-
SHA512
d7ca91b6c886931c102485e12ab5343b0df87f858bc7ce5c8b950100e0eb8eb06c2b24b1c96a029f77597d2ff455594bd30869cc4a63a03c0d6a1d25ca5a66c5
-
SSDEEP
24576:IL2cUnY74sbp9gwHSquDtPNCqrCM9obmbk4jN:yUnW4sbP3uRUFL
Malware Config
Signatures
Files
-
z50Iowk170GoWzS24q.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ