Static task
static1
Behavioral task
behavioral1
Sample
Wind Exploit Tool.exe
Resource
win10v2004-20220812-en
General
-
Target
Wind Exploit Tool.exe
-
Size
1.1MB
-
MD5
86de4f698831c1854e074f4556e2d84a
-
SHA1
bfaa5eddc6db3d6ff452947da2ce615c449d85b9
-
SHA256
e40e465f0b450e490237f4ec5b51b1567c9f6b439e1bb0880f72255790451083
-
SHA512
239b82ea43a2b0b9a1f7325842318c06d72008a5dd86f188ea1a6f47dae1f86412017f7340a5eebd536e4ef7a012eb8d8eebcbf3a2154a6b89a317894ee5288d
-
SSDEEP
12288:Eve333MvvvsnnnoP0zUP8jUeCaA3KzJxobpg/TYqPPNROiAgI9XF02bf333Mvvv/:EiC3Qx0p1qXOPg8XF02
Malware Config
Signatures
Files
-
Wind Exploit Tool.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 745KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ