Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
1.4MB
-
MD5
7ba05758c494f410eee5e78f5b2190b9
-
SHA1
55bc2e4344e5fee208bd195b7a5e42da8d1f3a3b
-
SHA256
194ebdc17146fb4fca3f3ee63480221bbc434961d48d3f7af4d5f0eadcc4d956
-
SHA512
d27ab2de1b0efc73aff520bc82379f481c7492847b7f009457e009acf30fdeb7e747bb670818b6dde353751adf9b90dc7f76a0c514bbca3e3eab1d86ab0f5a63
-
SSDEEP
24576:lS9mE7v7zmwbY2QkHqai6GuJFESjBndfPV135tRJ8QFFYwiWjLMTYSnM:lS9mE7vvmYY29qT6GuJFESF1J/pJMkSM
Malware Config
Signatures
Files
-
file.exe.exe windows x64
9af99c4647e788951fc37fd2f8305eac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
GetUserNameA
user32
RegisterClassExW
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 882KB - Virtual size: 881KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE