Static task
static1
Behavioral task
behavioral1
Sample
WhatsApp.exe
Resource
win7-20220901-en
General
-
Target
WhatsApp.exe
-
Size
700.0MB
-
MD5
2e53d5ae1aa5b1b3602e5ed25d844a98
-
SHA1
8e9422427bf343ea60b777162c356767652c67d9
-
SHA256
cc18f688d6b39275994d13bb4f7cc892101b89b9fdad6870386346af5d2f5ca3
-
SHA512
074558aeef007618473468502dbb0f8ef15b8fa8af36323a426af2b40b0634bf24a50813d0e909c5bc9ea7666c8f1e7fa92e9cc73c5362d72a7a5ba080884a4d
-
SSDEEP
98304:HYu7BJ0EUhXVjEmfnH/J8YIaPceig4akyV0JTpFmTG:46BeNZVEmfnfJ8Y5w5autpd
Malware Config
Signatures
Files
-
WhatsApp.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ