Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
General
-
Target
file.exe
-
Size
2.5MB
-
MD5
259ca2684f03ffbb9b361ca1447d3d6d
-
SHA1
d059518c5b6d97225c6f2c01975a04fa73f1b2af
-
SHA256
6e350cf33445a9e5c616c29a1cccbd737b9cdb10f76099f7a5dcde292c228d33
-
SHA512
866bbe819e1524de716f3972cb45e7eda65262238de0d4143371c3193a4aa11f13b58975c62fc3fea1217835b3331b5b1d896d7fd2c8fe0be99a41290c768b39
-
SSDEEP
49152:7OwapTA/I3ErHhGle6feZlMTbidz04rtpkyiV6fibDpaRJmNG:SRTmI3ErHhGleWezMadz0kHky34vN
Malware Config
Signatures
Files
-
file.exe.exe windows x64
23c75e339ee9e21e9c7e98545ceffa43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
ValidateRect
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 878KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.9MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE