Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
905KB
-
MD5
827971602b6c3e26483975a95b38f0dc
-
SHA1
64ac0df6898ae6af4bbabd318da0bcfa18dd4fa9
-
SHA256
94ceb3dd59315a61b875b951a6f21a703c16f25ae030dfa66b6bb269aca1e164
-
SHA512
7f3a31dd9bc43bd2d360926f21a8939a95c761e14fb6c53a23bc90a031c0f909e535e0c5127daee86792f06f4311d8d1ea3e08839fb506a965134ff74c12c07e
-
SSDEEP
12288:ItVSX3x7FRSJWeOkDPH0KN0vRVwq2gfIQ9SBhQeOuAI3APjNdptretr0y0nc:ItVSn52cBVwdgQQc/QelALPjdtrgv0c
Malware Config
Signatures
Files
-
file.exe.exe windows x64
f110620719991ec6ed6a12553a80a9ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
DefWindowProcA
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE