Static task
static1
Behavioral task
behavioral1
Sample
gunzipped.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
gunzipped.exe
Resource
win10v2004-20220812-en
General
-
Target
gunzipped.exe
-
Size
483KB
-
MD5
287eb9c9a8b0f517371c3d1b3ac327ff
-
SHA1
da9c16282500c82a9744bb1fc44982aaebdfa745
-
SHA256
45f6a7ba9209658aa71453bdb8648f7320f828b2bc0a77bd4e7e1ffcd9c26899
-
SHA512
7e230c0db5464566ae18d2524e8f89b59fe3f19d42f79daaa97424e91ce0ebeca2c758345ff6b39a7d29a763cf4c0d348e39bf7ced54a9ab9f0bdeeb6f365ece
-
SSDEEP
12288:k1xd8I8C7XX+y+rTjAXovDUJN7GE1HCEAmD3:Mxd+Cr+5Tk4vDoNN4y
Malware Config
Signatures
Files
-
gunzipped.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 411KB - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ