Static task
static1
Behavioral task
behavioral1
Sample
f21eb1f74f9b05c31aa1f8a4482268387c55f0e0258b0aa7f7a601f6df051861.exe
Resource
win10v2004-20220812-en
General
-
Target
f21eb1f74f9b05c31aa1f8a4482268387c55f0e0258b0aa7f7a601f6df051861
-
Size
887KB
-
MD5
b27c18b61282f380b0518e0224e8a8db
-
SHA1
3339b98912742cf4cf137bfc08d967da94d3a9c2
-
SHA256
f21eb1f74f9b05c31aa1f8a4482268387c55f0e0258b0aa7f7a601f6df051861
-
SHA512
e70d4a3805d74efa51dcd769e02ebf66ca989cc993ec25b70395d03ffee024dc2cc8e6756d8c40197ad15248ca58ce7896529272deb6967283e7a489338c03b7
-
SSDEEP
24576:/GxMBvng/hom1umQLhNb7fE0jnI9CMzy9s8pAPU:eEvng/hT34NbZVl+8pAc
Malware Config
Signatures
Files
-
f21eb1f74f9b05c31aa1f8a4482268387c55f0e0258b0aa7f7a601f6df051861.exe windows x64
e671547b322399c03343d65406e085fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHChangeNotifyRegister
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
DefWindowProcW
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE