Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
882KB
-
MD5
1b946a8d9e0e30915f241061c5106a3f
-
SHA1
2cf0b19ef93c46a164b0bc93cbb9f3793cb6c8cf
-
SHA256
2371a3a7ac61d4daffa56c66420d0bc7ec99f1aa7dd4428f2be4cbb9dc25138f
-
SHA512
b83858ee0e21c590cd932bbc92cbbf5a88d3458010535f18cfbe2343b99c396f373e788554b2638cfe0b76bca46e6b3734fe44d6b98d546b4252390a31be398f
-
SSDEEP
24576:qe9E/+x1L3sNSaH3uhbTsjc/BIQ8iU7cG19:qD+sM4UfsXrc2
Malware Config
Signatures
Files
-
file.exe.exe windows x64
ffd47a8b3b73ed77bb78081d8f6e5f21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
CreateWindowExW
kernel32
GetModuleHandleA
Sections
.rsrc Size: - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE