Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.9MB
-
MD5
019eb685a880716b5594b413ac26413b
-
SHA1
a69a6d3bc941cdc4330901a8b4675c9ef4bc25e1
-
SHA256
eab31e9a6af64902cf56799e3f1c46f42ba41b014b6a55cbf19d1352dca7eeba
-
SHA512
1eed02bafc9a52214aeac56c596866d9ef7d2842c49750b642a32e9ca5ddd6e6a591414d44d88b331a79f955008b4594c0739294ad34b851430c2dc8cbc152e0
-
SSDEEP
49152:zpFtPeFTefWNTt0dYMuZDGmAyzG9Oobmqel8wvxOxO:zpWeulpZa/y6PbqZk
Malware Config
Signatures
Files
-
file.exe.exe windows x64
de003dee97b14a1c79145791b2c213cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegOpenKeyExW
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 883KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE