Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
918KB
-
MD5
d033855d030cd6a19690deb337a50c8c
-
SHA1
624fe54e67c475f7e0725b0a3a9a67dce2f9b336
-
SHA256
d2b55acbf3aa2b30df7033794577c5cf5ebd57a4372e4f64c32bfb5b5445ca6d
-
SHA512
79f43020b5180111767665cd32dddaa70acbe613973c92f213c832bbbf64d2f1b6d8ff81f3fd688bc1ddba4e0cf7c0885971894514165c9031bed0d71dbbdab8
-
SSDEEP
12288:8tVSX3x7FRSJWeOkDPHIBZ2hFcHeVIf6+8LUFT/nzogiKBKchmYBfGmj96sb4/2:8tVSn52rFcMH+8LUFbcgiKQOf9rk/
Malware Config
Signatures
Files
-
file.exe.exe windows x64
816ac7b714655c4f009036881ef338c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
GetUserNameW
user32
TranslateMessage
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE