Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
892KB
-
MD5
cc2e309cc2107221a3e9a82e3cbab69e
-
SHA1
5320d4709d40d1ec5662e44684c8761b5a8794ee
-
SHA256
c2ccf7b016dc0afec394f8ed92401e7320771aba83151c2bd5be248c89492bd6
-
SHA512
ccb793a277b8dfd03b8f0d15442084d18aaca22e946a4a71c8dc6b510f5b03a8af3fe3e4d7231c4e209c0a25af1b1c8c94418e2b1af3ad63b8a07dc2c369ef75
-
SSDEEP
24576:2xBwvng/hoZs9DXtIzPsdhQDuqSmZ+WdFokoAT:mWvng/hfR+zW5q3dfL
Malware Config
Signatures
Files
-
file.exe.exe windows x64
9d44254b6c89ef57acbda3ad8209105d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutA
mscoree
_CorExeMain
advapi32
RegOpenKeyExA
user32
UpdateWindow
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE