Static task
static1
Behavioral task
behavioral1
Sample
KYC UPDATE.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
KYC UPDATE.exe
Resource
win10v2004-20230220-en
General
-
Target
KYC UPDATE.exe
-
Size
529KB
-
MD5
ec2221376b5811031e4726611a07f2e1
-
SHA1
402dafcba12ee7a30cc9407e63db5ecb558adc6f
-
SHA256
80d41016c2bf67df26677e38cbb13ab1ea552e4bad0e8ecb5e6e462297a7694f
-
SHA512
2d29800348b942395a8a9b134d824b89e4d47e5bea0d586fd3a388778c1a57694169cfc2e107089c24a5da3fc0335d652ceb253ff208ae1d3fecb49570b3e7e2
-
SSDEEP
12288:sYLaGLlYjoGb4tKz8mRlN4nh0Sn+zmgI:XLaGLw/bl3rJmc
Malware Config
Signatures
Files
-
KYC UPDATE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 523KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ