Static task
static1
Behavioral task
behavioral1
Sample
legit.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
legit.exe
Resource
win10v2004-20220812-en
General
-
Target
legit.exe
-
Size
3.9MB
-
MD5
1134c0413858d2ae23e7760979c14d92
-
SHA1
d93e71f296351f45fe38157d064a110f904b50a7
-
SHA256
abb6f2bec85ca34d7702ae7425935f1df6f8460aaec5d1032d2d37704ee00c88
-
SHA512
a7d536e067f5c88bb11018e318638836845666d8df3f9444abbecdca377e6f5085d6ad800cea605c2dfba9ec0d49da81bf9d1dba83eaf7db3c1189dd6bac60fe
-
SSDEEP
49152:YM3OPI4zNk+YYhdCLSTPIVM77VTEK/wr04HzV0FT2AHfGzZ80pjKiTl2ZR:YmNiLJlEK4dW/GzZ80pjKC
Malware Config
Signatures
Files
-
legit.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 851KB - Virtual size: 850KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 212KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 772KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE