Behavioral task
behavioral1
Sample
237a3d1d02821f1693d342609a8abec341a6e498966be74cc29926dbbf11b6c2N.exe
Resource
win7-20240903-en
General
-
Target
237a3d1d02821f1693d342609a8abec341a6e498966be74cc29926dbbf11b6c2N
-
Size
316KB
-
MD5
9d3b26f908cca0001bd835e35057bc10
-
SHA1
f1099d49ab78405cddd47d040a02fc420110fa8e
-
SHA256
237a3d1d02821f1693d342609a8abec341a6e498966be74cc29926dbbf11b6c2
-
SHA512
b94acef0e311a25505da79c53e96ee8f91c3aec22a9fae0db7251c5f2edccb0aa47b768365213559e1a585ae7947ba4614d55d53879279109e378ed674618edc
-
SSDEEP
1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:wIdseIO+EZEyFjEOFqTiQmKnOHjzU
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
Files
-
237a3d1d02821f1693d342609a8abec341a6e498966be74cc29926dbbf11b6c2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE