Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
848KB
-
MD5
cf937f7dfd0e515a65373affb28b1c31
-
SHA1
4c7a4a49f66fea0d83f668c05d6c105163a3a5e1
-
SHA256
1c296fadded57fbb61c7d97a98258f3fa6ca20a1f5e6ada8981ba4ebe1fe33c7
-
SHA512
ad1dbd88a50e665ed1f57b80990dcee25e70a5c9535cbd7d6555f807e821f203151600b6a220adb9e161963f047bde33a2a66f5fa7821cae864d233bbc795803
-
SSDEEP
24576:3q0/FbYZwtHh4twja2zEtxS7BsIz1AK1:BbL4qHZ7uIz1
Malware Config
Signatures
Files
-
file.exe.exe windows x64
56f6ab543c3d7890c5fe5376d5888cba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
GetUserNameW
user32
EndDialog
kernel32
GetModuleHandleA
Sections
.pexe Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE