Static task
static1
Behavioral task
behavioral1
Sample
prova.vshost.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
prova.vshost.exe
Resource
win10v2004-20220901-en
General
-
Target
prova.vshost.exe
-
Size
5KB
-
MD5
d2215fdd1d8bfe53999ab611795d6ccd
-
SHA1
dd04969f232820643dd3f5c0a172df1c5cd55a7b
-
SHA256
364d786dbe6596f0b23814187f154ac4dc8d28b446d33d92b4670a4d56a50116
-
SHA512
254c3c29cbfc98c558297ac29b5da65864a8318a705a629b386792fb980679e04b1f9746113621767446ca67659fe190312dd3aaabc8809f612e292c4d0f145e
-
SSDEEP
96:5PBYHguj2xvpafD3KrDbdYzYbgQfWO0VmWgO:5I1SxB8zYbgQfWO0VmWj
Malware Config
Signatures
Files
-
prova.vshost.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE