Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.4MB
-
MD5
51f0cc2275660711024baa9dc8e2808d
-
SHA1
a871073c99201c8d5530e85abc87f03a502d241d
-
SHA256
a442539eed2250ee582e317bf5e9180fcf87b07c9fe15d7c1cc27276175fd148
-
SHA512
5a911321c3ef7ee5aaca5f78603638c4532ba7d21b34c2d212a6ce677c63c83abd8526c8e85b714f15bd24aec9a807b1b02a18064aada4d2b72529fbfdd4b92b
-
SSDEEP
24576:/S9mE7v4bcAjUha0rtSbm3IFEFA3uZ2PbM+fvvIFR7NyGPCBzO:/S9mE7vGcAUhntum3IFE4PIy3IY5S
Malware Config
Signatures
Files
-
file.exe.exe windows x64
da6ad9ac46f6310bbfbc2ce79ab0f386
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHChangeNotifyRegister
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
ReleaseDC
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 866KB - Virtual size: 865KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE