Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
922KB
-
MD5
be8e74b85a16a21cd05282238035af65
-
SHA1
40f152f2e17b1fbeba9d1a8ea9da56b5e38925f1
-
SHA256
1500b3002f56a26aad69d22aa1fd7cedb22986447b591e4831b9807026acd825
-
SHA512
e6341177d4ff0aa05a8b19aa5f4c3128268ad6659abfe95b9313eb5cb05f0b2101a7e24eb9d107def65721e7637188dd495229979fda5f7157d85822c471cde6
-
SSDEEP
24576:oNcwo7E2EWzRed/fOwtvS8YUMWkTE1ZSjxIv5En9v:oNm7E2EWzRed/WkKnUM+2+WF
Malware Config
Signatures
Files
-
file.exe.exe windows x64
8429af20a9943ca0b1a82b2b1f3a248e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
DefWindowProcA
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 878KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE