Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
841KB
-
MD5
271d2b85b75d191ef77ee0ad01e84975
-
SHA1
27d10da2fbe474aad8fd4e14dbe91d7d8df12470
-
SHA256
adbdc8fbf39fa4942fda9e524c274da27b745df83faf87db4a0f0cc4f5442711
-
SHA512
cb1422477200e41e8da093c34c3686a55c77d30eac6d2a1d48b8a3aad57c596320850a1b9771c5c6c0df748cd60802846b7882ceb92efa1682ff9afd5510aa1a
-
SSDEEP
24576:VMMoxo0vng/ho1c2o4NVHI9vn9IonMl3OlDcZQYzEGJ:VMMkNvng/hAc2cvnLXAQcES
Malware Config
Signatures
Files
-
file.exe.exe windows x64
d83f6cfd7ee5ca30e16837a57a663fab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
IsChild
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE