Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
General
-
Target
file.exe
-
Size
917KB
-
MD5
4c48470f3279dff89e27489777ee2918
-
SHA1
2a6ee90e56ecb7ee4e7652faab5bdf50ba61dbf1
-
SHA256
332963bc8d4592d82b0af12f674e54053913795e5a92e494409ac417d6b90575
-
SHA512
eb47c263575d1160ac02a7372e87efab4b4deb1686e7a2701bf338c855e621fedce4e6d19db125776144c4d57781344977b17937eb7ff46d53e8ee0f866b9532
-
SSDEEP
12288:yO+mxQcvGtjDsg/hoiw79qJ0XOdlfjw+Ptbsq+e5SFVRKcJ+NZP8HD7g+0AO:yO3xQcvng/hoNq2efba788/mn
Malware Config
Signatures
Files
-
file.exe.exe windows x64
5ce6fec530869bf5bea8f873c4d6504d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
CharNextA
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE