Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
604KB
-
MD5
5e884a4470d4963028d6ad3251d9cec8
-
SHA1
838a4ef142c6bf835cb377d59e69138ce140017b
-
SHA256
c710e242e56df1c6f835788eef77e7d9944b25e06edc9e3b28bcc1e86cf9a9da
-
SHA512
6a98d5f29b719b8fe51646348d4d87e91ea91df7ee5a49beaf94db3f0749c323af5316bdaae5af0dc4d3180384bda42cc7e5a1bbd53a4ef3435fba6be98f005b
-
SSDEEP
12288:yN6MKBc3r+2zRM46oJo4pbsuQWaaFaC7QBPN5W2dtBY:W35+GMJoJMWaa3255
Malware Config
Signatures
Files
-
file.exe.exe windows x64
d255ba059fd85116f98fe117e7cb2129
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
CharNextA
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE