Static task
static1
Behavioral task
behavioral1
Sample
GAURD.exe
Resource
win10v2004-20230221-en
General
-
Target
GAURD.exe
-
Size
4.0MB
-
MD5
8b32aadd4c780cf03ccd2d230f76d069
-
SHA1
523b9b6140fa3760c8a5058254f7ea1d5f42eb67
-
SHA256
6c70552a634bbcd0c1f612ef2df28002c7eaf4949f30b65e3a4821349c21060b
-
SHA512
8faee4ebe48e0c3c1e2d92e4df52a051a6cfc6a1bd7b20adb3f0b8abdf6dfb895ad7d8be8a429a7627f2f2e87f9fe76af2ba6161b8aad2b22bfdd8ea1b5b4ce2
-
SSDEEP
98304:hO9rM8rGA1zqNiJbt/ky/s3799qkl8kIYas85E2H:hOOJNNid5L/s37H9LNmEI
Malware Config
Signatures
Files
-
GAURD.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ