Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
3.1MB
-
MD5
7cad6246296f770554928c45c7c64924
-
SHA1
a1c0ff501c02b8250f23a1cd77ca783dcb403a4e
-
SHA256
1bec453ca11e104bf0c20c9864b52f27deebfa3f477aab6df7514adb6369a5de
-
SHA512
97b816f3ea562b4ef2655edd5a9436f30510ab80775fef87444b23bf165796be9a936a3e838f4c5602030a74122683bc3b8a69b781f8e9c7a4361e85d9394635
-
SSDEEP
49152:Op/N7lXmgjdrxjipPqys6PDi6O57CfpC0bkMCt8QKwInMw3KOmXjE8O:Op7rxjSSy42RCKkP0HKdS
Malware Config
Signatures
Files
-
file.exe.exe windows x64
503acccd6805773b76f2538ad2ec150e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
GetMenu
kernel32
GetModuleHandleA
Sections
.pexe Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE