Static task
static1
Behavioral task
behavioral1
Sample
0479683ff6d420fc73b1b229615dce2b94d896ca839747e2c7ca94a258b8ccfd.exe
Resource
win7-20221111-en
General
-
Target
0479683ff6d420fc73b1b229615dce2b94d896ca839747e2c7ca94a258b8ccfd.exe.vir
-
Size
1.5MB
-
MD5
8178f9cf63e86d900b1d5acdd55047eb
-
SHA1
16a472773e3dc3bb46bf86ec5896217477d89c94
-
SHA256
1bdccdf7093dd9eb99cdd1b665c0a551a07ac831bdefec079bf24f2f060185a5
-
SHA512
ac984d4f0278fb36cb70f37d7741e49e53bdfa9057f89edb8120ee5a80406096eddc0e9e5ae3e571513d2d5e01896587084caf85de08116502c03585d211d90b
-
SSDEEP
24576:wSjaQTEKxZfYIAOFGOVJdMoll7bfXQCmF8sPpitbZ5hnbH5gdyjW22hq:wSjaQTESZAIAhO/dMollpIH6hnKgjr
Malware Config
Signatures
Files
-
0479683ff6d420fc73b1b229615dce2b94d896ca839747e2c7ca94a258b8ccfd.exe.vir.exe windows x64
d255ba059fd85116f98fe117e7cb2129
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
CharNextA
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE