Dynamic Analysis Report
Created on 2024-02-22T11:01:51+00:00
Xjgkkltfdhdfhfjg.exe
Windows Exe (x86-32)
Remarks (1/1)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "43 seconds" to "10 seconds" to reveal dormant functionality.
| Filters: |
There are no files for this filter
There are no files in this analysis
| File Name | Category | Type | Verdict | Actions |
|---|
| C:\Users\OqXZRaykm\Desktop\Xjgkkltfdhdfhfjg.exe | Sample File | Binary |
Malicious
|
|
| MIME Type | application/vnd.microsoft.portable-executable |
| File Size | 3.25 MB |
| MD5 |
2a3a840641803b101b86e0c321b0a5fe
|
| SHA1 |
52bc3e121f44c4f9e71b43110f468886294c7fc2
|
| SHA256 |
b025e37611168c0abcc446125a8bd7cb831625338434929febadfcc9cc4c816e
|
| SSDeep |
49152:zCXtvRXOhEc2MgyyuTEGQp8EamZaFChW7ZaxJmLufu4I:zCxRXOhEc2MgJHTp+isL1
|
| ImpHash |
5e4731b579fcbf2ee2d5b665a7fef172
|
Memory Dumps (60)
| Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| xjgkkltfdhdfhfjg.exe | 1 | 0x00400000 | 0x0074CFFF | Relevant Image |
|
32-bit | 0x004A8AB4 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | First Execution |
|
32-bit | 0x024A5474 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A0450 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A45CC |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02495EB8 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02491079 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249D394 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A2234 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249E6E4 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A137C |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A22F6 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249DE62 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A3ED0 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A4B08 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249E6E4 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A232F |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A3ED0 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A4B08 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249E6E4 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02491022 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249F614 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249A19C |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02495FC1 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A52AC |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A16E0 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A02F0 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249BD40 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249BD9C |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249FA5C |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024915BA |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249A19C |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02493330 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02494000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02493000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02498168 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249C828 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A0578 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A4978 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A28F8 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A3A64 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249EF74 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A5000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249F078 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249B545 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02496A92 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02498430 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A0578 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A4978 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A28F8 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249C828 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A1180 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A3374 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x024A5000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249EF74 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x02499000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249D000 |
|
|
| buffer | 1 | 0x02490000 | 0x024C3FFF | Content Changed |
|
32-bit | 0x0249108D |
|
|
| buffer | 1 | 0x009B9020 | 0x00AB901F | Image In Buffer |
|
32-bit | - |
|
|
| buffer | 1 | 0x02410000 | 0x02440FFF | Image In Buffer |
|
32-bit | - |
|
|
| xjgkkltfdhdfhfjg.exe | 1 | 0x00400000 | 0x0074CFFF | Process Termination |
|
32-bit | - |
|
|
| dd770c0d8301a5bf7408d98be823da7ec0ee7a30793b6f3e43a3f7f66bb779c3 | Downloaded File | Stream |
Clean
|
|
| MIME Type | application/octet-stream |
| File Size | 7.46 KB |
| MD5 |
ca6acfcfa5089a63edc7eb36a9bac499
|
| SHA1 |
2596307978997fa744e017d34047fef6944e5e08
|
| SHA256 |
dd770c0d8301a5bf7408d98be823da7ec0ee7a30793b6f3e43a3f7f66bb779c3
|
| SSDeep |
192:lIfqWpzaBSnTnQg5FYsKk8SAVOYE/z+t2EdhXogJwW6hljl8:RozaQnTJFYfVVlEqTdhXogD6Pl8
|
| ImpHash | - |
| 5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e | Downloaded File | HTML |
Clean
|
|
| MIME Type | text/html |
| File Size | 552 Bytes |
| MD5 |
eac0a6a53d4a4353aace122055b4b4c8
|
| SHA1 |
b400d2a40c870dd448eed9b418297c3038b9d023
|
| SHA256 |
5fd55da8747d933410bb637571802aca2eedf3314039722e2b9d6f37afdad97e
|
| SSDeep |
12:TD11VI48lI5r8INGlTF5TF5TF5TF5TF5TFK:bGDTPTPTPTPTPTc
|
| ImpHash | - |
