Static task
static1
Behavioral task
behavioral1
Sample
Paladin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Paladin.exe
Resource
win10v2004-20230220-en
General
-
Target
Paladin.exe
-
Size
806KB
-
MD5
513d61b0c3eedf62d8b5b0918d9af7cc
-
SHA1
9073b4aa69a921e8aaa50de0a1b84f1e496667c7
-
SHA256
57509395d4b6a99d5174ac3e1fee67c89351474467ef67fd3719159750d21820
-
SHA512
a379cb48ab09984aa55a9ff653748bf14752c16a23f31c14e02c927eabf549b04d2751cb44a959e5851160a443ff858ad9ec4a2f385499500d7bee65b931da8a
-
SSDEEP
12288:OwaTN48/1m9oNlm+sYW18y0/p2G9e0sfKbPQLd+kDHOKhp1fNyyJ1BCe7/UByV2X:7KNpkIFsgt9epfKbPQBTOKpNbJ1BDrq
Malware Config
Signatures
Files
-
Paladin.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hydro0 Size: - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hydro1 Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ