Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
General
-
Target
file.exe
-
Size
897KB
-
MD5
5dcc23979a77a8cd6f190ad62d9b179a
-
SHA1
43b79b2f50dceb3e1b2788bd84dde32c7add0cd6
-
SHA256
ff6ad683d57903b06aefc4854fff49039a85995e732b9ad99024a135b32eb581
-
SHA512
7dd858859026b938267e2033aca50c83a8461c53859fcfa1347ee8efc41c463b780b7b89f04bdc62b23906994bda789631d27fae0792f43f5b71209456446bf9
-
SSDEEP
24576:LtVSn52zKm6FWVo44NSyOkyA1+SaQ5zvhNw:HSn52zKPF0yOky++SJhK
Malware Config
Signatures
Files
-
file.exe.exe windows x64
fcf8b3e246ac86810eaa2f64c33778df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
UpdateWindow
kernel32
GetModuleHandleA
Sections
.rsrc Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE