Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
736KB
-
MD5
f7ffe46aeb24722a7b0714b06e47f9d7
-
SHA1
3ba3d57c320cb005170a95223b97f6e12f74352d
-
SHA256
53c898742fab1cd25704abc2d9297888c709dbd38993ed50f0a627b81b275cf6
-
SHA512
9bb6d885f311e2fc7f631f81cebcdb0c89933c005a6aa36fe65a3a23a2e911c7672d033a65bd1e6865da92cdc54192ee0000a63ecc88fc574496ba59a852f6b4
-
SSDEEP
12288:VQWaHGg2EBPxntobgC/qKK80Guu6aSECeLn7DOlQfpwF1KqLWS4R+:s4EBJntqgiqS0oQKvOyh61i5R+
Malware Config
Signatures
Files
-
file.exe.exe windows x64
f1ba7ce378247baf1b63b19ca8d99a78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
CharLowerW
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE