Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
788KB
-
MD5
fb5811b02ceedb4df9a5db40cb741505
-
SHA1
015cd173dcaea5783c1150b5c5b46012246825a9
-
SHA256
9d3c9eee22a24f54fce24a9b1fd4efd7af3f0a67f0ce44f807b0931e89292eb9
-
SHA512
cc344c6e9f79a35b7abb7694923ea9aa265b841c44ef06ddb7dc397f7286b7a7cda2d67c7dd36bc2ff345241e6ca70bff3d3a31efbbc3eb9c552aa11f7ef208c
-
SSDEEP
24576:6i8r/8xyE8geCU+Ic4gvlSEF+9ZxbcFzyWp:qeyfMTZZvlHEZxbML
Malware Config
Signatures
Files
-
file.exe.exe windows x64
e16c8ad9ab41cccba15c5755c87bd595
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutA
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
OffsetRect
kernel32
GetModuleHandleA
Sections
.pexe Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE