Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
889KB
-
MD5
8b48f9948f70940693a4e1539c86eeae
-
SHA1
c4d2db48c780f3354b8c9659fe5bcfdb73737b13
-
SHA256
70ebdf52178dbbbe01cde371e34c63482af72dd9010b451904526943aad511e7
-
SHA512
295efc4bc1a1f848ec9ccc18b900bf3ae55265a2746c1d1e195af653c8a0ae9536885d0f6eff5873048cd1bc7f68554189b297081e243dd985ee9241f0776fc5
-
SSDEEP
12288:+tVSX3x7FRSJWeOkDPH4Ua1SAoqpQroHUEMjRT4fJrnv84ZmmDIOpBkekUDeADoZ:+tVSn52gUa4Al6UIT4R3PpBX1nb
Malware Config
Signatures
Files
-
file.exe.exe windows x64
5da2658e0f192482b4ad72bc40901dd6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
EndDialog
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE