Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
General
-
Target
file.exe
-
Size
917KB
-
MD5
86c73693509ffd76b009203a0d098f68
-
SHA1
0d25e31eefe5b7a050969576329da8a68b9a4186
-
SHA256
968bd316264d8a1e455cfec67310b5a1376a3ef556efe15e224e2f4fc5cb0415
-
SHA512
eecb5255adbef5f156ee29900fdab5e3721133ed6ee1a0c1603f4f1e4c1dee0632b71d959d6d6a4fc7c29b11ad71536d1f4ff730e5ff1debe567233c15bc5bef
-
SSDEEP
24576:To+V+xQcvng/ho0KHuYkawKll79/QhKkUYoba/ZQQTwX2OUp:TvVelvng/hPukrK9YhKkUYo2hQR
Malware Config
Signatures
Files
-
file.exe.exe windows x64
eb9905086d7abbee0b5b39f34a5d6c8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
GetUserNameA
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE