Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
808KB
-
MD5
6f0c0271d93158d2a8425cbb1a4a1557
-
SHA1
a7d965b450e433d1c1a1d106c82d9861c447ed66
-
SHA256
532d8d05263ecb3453da330b6213c9d5cb1f1eb5db77b40664c7ec722b9f9475
-
SHA512
fbc6bd78240a12d52b413e064917009ea9df99b5e4f85119b13e3b13ffbb862f967871f9e9eb85be54ef3ed54f939dbbaa23b973e4149f59093a67cf11940c0e
-
SSDEEP
12288:ko/wyn457hqndsQQtRJLGxZEk+fBfUEEjhQaLALlJ/r7YlvJSeibJWEQv8FrlZGK:kNp7hqndsQQt/GxShQuaLnpO9RFzG
Malware Config
Signatures
Files
-
file.exe.exe windows x64
cb9da58c0b9b8643e59aafea2923e8fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
ScrollDC
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 221KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE