Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
3.0MB
-
MD5
bad4c65094df8d5d438cbe67aaa9aa1b
-
SHA1
3cbbc16070ea8edf5d2e1e80a59fe47c89f68f7a
-
SHA256
3a608eb3b749951029e85f41f675cc6371d38410611112478a4636237e809e95
-
SHA512
31cb7e2be118143af1f8d53ba9216d0b8884d53b8dc6bc87127ba7780f9994adf181215039207311e53ce3d95b1ba21fda8072a7fee7bd89674784cd14ed354c
-
SSDEEP
49152:tIIohLmF7VRx/ipDaub6UDe6hzq3AxC03QbbOZWEwIMCag90C:tIgRx/S+uVOgCKQPtzS
Malware Config
Signatures
Files
-
file.exe.exe windows x64
a440b909a947f928ec8f80b4dee9cee4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHChangeNotifyRegister
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
ValidateRect
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE