Static task
static1
Behavioral task
behavioral1
Sample
ungziped_file.exe
Resource
win7-20220414-en
General
-
Target
ungziped_file
-
Size
408KB
-
MD5
3b2a0d33a7e203cbe6eaed6fc0bbbddf
-
SHA1
c724a4490fedf424f1acce3b2008fab48b68b3b7
-
SHA256
13993fa2040944dfc5e766186ea57b7683ca47fedcfaa8972674fb8148a242f8
-
SHA512
a951aaa9296fda261fd283e060c2dd6247b6a18d3904e03a257d649dc12cc1a7c8ea4b4bc75fa85628462903f46bbcf22771a5f2dc7df468387c048d5e70d28c
-
SSDEEP
6144:Kivo2KBe7epGAQ+0p11mrKdJEaZrQ84ry7XSPIwEVnQqzNNKeMy4K0/YT5YA8f:lNxL+sgKdJEaKb6YEVnQCN6y4K7o
Malware Config
Signatures
Files
-
ungziped_file.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ