Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
1.9MB
-
MD5
6692075280df619a3e70c8e9aa6db8ac
-
SHA1
f354b9e64d994815058a145c2e1dd4914ade6d78
-
SHA256
5d19ae54d2385c07ac17c65f1fe8298b851597345c6e54d20833def2856ae449
-
SHA512
78965f5a9d773b6c5b2e5e765b2b6921819c2ffc0d5e42e66b047df1e175432f63bb2a093fec4980d81d640b54fafcfb027bf4c20f7943844867e83e90217503
-
SSDEEP
49152:ApFtPeFTefWNTt0dYMuZDGmAEMZXtJVkn2em1:ApWeulpZa/1dJWn2em
Malware Config
Signatures
Files
-
file.exe.exe windows x64
e5c87b4fca37148b1cedf5475248ee43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
ScrollDC
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 883KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE