Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
882KB
-
MD5
709676cd0cbe4ea52d007b2f61539ea9
-
SHA1
d4572016e55c2e179614c0e751cd9570538af080
-
SHA256
a95df2907ed729f3f8072704ba5b768db325234e609a27559cea847df3f3da28
-
SHA512
8ea3b1c27fef6fb9f7741943510de78bcb8d840e53e2c5ae326859eb4ed81be3bed8de8a98327a00cde3e67a3c80fcd42fe43842fc86b6ae6a5d00edcdaf179f
-
SSDEEP
12288:qtVSX3x7FRSJWeOkDPHpImFKC0QU0VgJbT54JgVEwggTQcYcDnBJlytl/ztM:qtVSn52BIY/hVg9T54CV5gaYsnBDw6
Malware Config
Signatures
Files
-
file.exe.exe windows x64
eb97e33413f820388157bf00fb3d0625
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
advapi32
GetUserNameA
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.rsrc Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE