Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.3MB
-
MD5
63a5a9ecfd59f81c8c2744f54809c7f8
-
SHA1
fc9fa3765ac64a6c8a8607f3447d47151acbe7c4
-
SHA256
a07d160c21ffe45dfdcc0e0b1a485293063b9b1751f635b989fa41075019290a
-
SHA512
9356cfc34a4cf8736cbc6962be63527376590f96e04c91154071e5617e0876bb9aa04b0e7c5dde1d12e3b88d36b6150bfeaf8a2f09e0507e089b90ceb68b1071
-
SSDEEP
24576:WdcgTewpeuCLZQ5wrS7j5G1bDD6egAmkI:WdcgT1pehZQYYKTX
Malware Config
Signatures
Files
-
file.exe.exe windows x64
7f3042474b65617353ef0264b23b3f6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
TranslateMessage
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE