Static task
static1
Behavioral task
behavioral1
Sample
896bad806fe646d498f70e456adb6296a5199f81ce4daaae2b8c65fad9426f80.exe
Resource
win7-20221111-en
General
-
Target
896bad806fe646d498f70e456adb6296a5199f81ce4daaae2b8c65fad9426f80
-
Size
1.9MB
-
MD5
0682edbb19dbe78f179a824ff09b8472
-
SHA1
2dabf0eb14488c4853c9727f6122fcea9ea68658
-
SHA256
b3ecd25daf25e1863a10d36fec267279ec344b291b1d042580668ee54f0c0788
-
SHA512
209d455026483f0bb07563f5d68cb2eee92bb73491bbf616105f5c65299ee59e5d85ede8cfb9b043ccb28457d476ad20c56e83f074a6084b2255df5cc50685bd
-
SSDEEP
49152:fIDyqnguzqw/ZxU5SGz9WIYYGzE+iSnSJTWxJ88GF:fIvJQSGhWI9Gzrix5phF
Malware Config
Signatures
Files
-
896bad806fe646d498f70e456adb6296a5199f81ce4daaae2b8c65fad9426f80.zip
-
896bad806fe646d498f70e456adb6296a5199f81ce4daaae2b8c65fad9426f80.exe windows x64
e78c2b2f23fa0838d24db7d57e13c1d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE