Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
4.6MB
-
MD5
a35da4b10269c87dfe1a5ff1493a16a5
-
SHA1
1f83e368c92ecbb9e5ebe6adb8bc5448d20db8e0
-
SHA256
de96e27483b81bec57e86f32954d7de623bb7a6c89aefa721c136fb60d148768
-
SHA512
777378f657f8356f96487af3f240061eca5aac42df0d5a8827df94161eaee8ecebe826c380e8735d002fc3b7226043d306a3cc01d7be216ca8d179c99a1bda06
-
SSDEEP
98304:UXiMHYMwgkPGdDCSxFBqVZk6BGcHxXZNXzbcrKKGpCd05zB8Dhuv9LPtr:UyczpkPmDCSxTSZGc7N4vK18FulLPR
Malware Config
Signatures
Files
-
file.exe.exe windows x86
407e3b5378b3b0b56c578f72b3227fa9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
ReleaseDC
gdi32
CreateDCA
Sections
.MPRESS1 Size: 4.5MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE