Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
849KB
-
MD5
3e69d56846083241547bd1a10c273115
-
SHA1
fcf5af86031130b3764d76d64e296345fc88c25e
-
SHA256
9c474206c922b92256780088023c21fcf09bc9ab1d7d06f36f3c4c0934b82e23
-
SHA512
29e6cf69a084020975a2b81ae2e1c16e6ca7c763fb3867ec2db110c05d69df23f5e963ca8e07b1b97f624f4ce2e6fe6da5c0290ed62e4f1c74280b35a6a4ad25
-
SSDEEP
24576:pQVx1ovng/hoBnKTl/z8sLhJRrEl95Tqto4:pQLivng/h+nU58P7w
Malware Config
Signatures
Files
-
file.exe.exe windows x64
a632cf690b3f41c3e04efb53662f2a77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE