Behavioral task
behavioral1
Sample
DisplyyLoaderCracked.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
DisplyyLoaderCracked.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
DisplyyLoaderCracked.exe
Resource
win11-20240508-en
General
-
Target
DisplyyLoaderCracked.exe
-
Size
64KB
-
MD5
21e2d5be21d112bb5857e0676c569305
-
SHA1
7b1709c18355c55fbe02d26624939b68eb2fef36
-
SHA256
2ee879bae5bf23f35217413afaa830234c9902454583b84bd2202eabb79bd549
-
SHA512
65d85028e8aba663b9cd89e6d800ddd840fb748cff90b3ec459252d1f8ae7ddcb6ee3f7ad526f50beb2845d586473c7109ea63ddfb3d887d551f171d35b71937
-
SSDEEP
1536:/nSdsWGawQub4zsiUbRh9HyiA/euDKWpqKmY7:/zWGwuUwiUbRjHVz
Malware Config
Extracted
asyncrat
Default
hot-blood.gl.at.ply.gg:13720
-
delay
1
-
install
true
-
install_file
CummyDick.exe
-
install_folder
%Temp%
Signatures
Files
-
DisplyyLoaderCracked.exe.exe windows:4 windows x86 arch:x86
Password: geaggeaggeaggeag
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ