Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
General
-
Target
file.exe
-
Size
232KB
-
MD5
4ec4d0d19f14ad56037402beec7d4d1b
-
SHA1
cd92e1bf45af52a2e811839c49658d9f4b18cd46
-
SHA256
98e33deb74a9c4ef1008f983da38e5ba9bb2bb93110e335e89d4c2413a65a7db
-
SHA512
6aa71f3fb3caf23196aacb0d14d8f77294e8f16dbacf4367ea6bdf6a8c441e6cb1334623f79851e736e27013ed45d8f40e04960f84e71ac90529492275f9c2b5
-
SSDEEP
3072:6ZRpkCeHJFTrSWmzfDXRN8wXXlCt85+U/rO3D3d55nV9IQAQdruSKHppppppppp0:EeFOnj8wXXGU/rO3brtnIQAQNuzf
Malware Config
Signatures
Files
-
file.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ