Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.1MB
-
MD5
29506a5821398103b1ba1f9d53b90fd3
-
SHA1
bb746101fab9ad76e5aa99a7b85c3337f96c59e1
-
SHA256
231da5c49718bad2f3aaa7ec962b69df2cb384c2f1f50b8b5113e2c10f02ba75
-
SHA512
b8c3e4ca9e6eb3ab307e97e2036c292541189128d6fe537778dbe7974328a2e8eebad74174dc791969fe17ad590fc1f5ca6b60397be5203e2cf064b17fe1b93c
-
SSDEEP
24576:5TMC/iMpxwmRoPanhESXdEliAKRNpMd3Y+RpjQETRMpqxM2:3iOjmihrClCpGrpjQES
Malware Config
Signatures
Files
-
file.exe.exe windows x64
cdec780b488c135bc4fb4193755918bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
CharLowerW
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE