Static task
static1
Behavioral task
behavioral1
Sample
Yosdofwiqay.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Yosdofwiqay.exe
Resource
win10v2004-20230220-en
General
-
Target
Yosdofwiqay.exe
-
Size
1.7MB
-
MD5
8b5aebbfdc88f95116a67d1fcdd90e38
-
SHA1
fe2c7ea71c400db803c70e11dd04f0b78d0d943f
-
SHA256
349cd974c45c839a882884a1470b227aa29267b071cf6911e9cd29db97ff548e
-
SHA512
4b0c479dbd94e0a727820861170f6c13a19d02dacc920bfa31da64804c465ffec7b8faf7a11c13a50e45b4689c987d9391a59944aa6d2bfdd718224a92abd59e
-
SSDEEP
24576:QCh4u2rfgkvtcEdE1022xUsnsziZvd4R0h2J5x3lse67gTzEzIcMDpHFfXj:ErZFNEArvHOOifkk1tXj
Malware Config
Signatures
Files
-
Yosdofwiqay.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ