Static task
static1
Behavioral task
behavioral1
Sample
SysinternalsSuite.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
SysinternalsSuite.exe
Resource
win10v2004-20220812-en
General
-
Target
SysinternalsSuite.exe
-
Size
4KB
-
MD5
4073e72422a1cfe65e0df00ea25b5a45
-
SHA1
5327159658c3dc5bb3b13e5871677bf7b9a1f6a9
-
SHA256
7e805c67013b5f40a62db99c67a43781b9252ffe70c1fc5ea5ddeafb9ed277e6
-
SHA512
ea81a623b2f47d9cdb906b248cb198f7004193ecf98c0c0843549075c9aba3bf223ca082729a28fffba341d62dadadf409e90cf30b7166b8131d8493dab87849
Malware Config
Signatures
Files
-
SysinternalsSuite.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ