Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
932KB
-
MD5
4bc9d568a0ed40c255772d669f957eb7
-
SHA1
8f165048ecd32648c39c4d767eeb60cdf50a8104
-
SHA256
cfeebb34400e0324a3c3017a47591d4c16a105376e9473044ab6c17d4bb61065
-
SHA512
a1af7fd434a7a20733cec55840a71b7061a871dc5b92a2ed104f03743104d3fde8c3fdb67b0410dc840bddf9c0e6d60ee62e8e9963a1f062c3bc27eba4c470b6
-
SSDEEP
24576:L/J4xAlvng/ho2FNmlZdOLxSldZnWDfSJh4gezjvfPr:Lh0Uvng/hmKxKdZnph4lzjvfT
Malware Config
Signatures
Files
-
file.exe.exe windows x64
de003dee97b14a1c79145791b2c213cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegOpenKeyExW
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.pexe Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE