Static task
static1
Behavioral task
behavioral1
Sample
YWjESQ2siMOeTGY.exe
Resource
win7-20230220-en
General
-
Target
Documents.tar.lz
-
Size
804KB
-
MD5
a3b931cf0c0e4232a64f842ec134f495
-
SHA1
6943080fd418b8ed710ff3c8f5d88bc24afcca1b
-
SHA256
482eb10475109e17ac11cfb60a2c79555a3e3b095d1113456d798ef000714acd
-
SHA512
317f9c0ed9e43c922022108d148211cc6ed4aca2479fcfa6c177eefa7f6c87a3c568e33f171821eca73973226d71ceb8318d8fdd4b398476a56131f15ec52adb
-
SSDEEP
12288:spmXhQLER1MovsmJEYFAOI6C91YKqm1YHOuqx35+uGO7X0Y+7/FZm4GgJ2:CmaEnqYFAP6CvAm1YFq5+ui7Ig2
Malware Config
Signatures
Files
-
Documents.tar.lz.lz
-
sample.out.tar
-
YWjESQ2siMOeTGY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 827KB - Virtual size: 826KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ