Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
780KB
-
MD5
a2f7f086a531075517f7002be9c78d1d
-
SHA1
c77bca59f085012b4b2b3aa08c70ca0c1f7b3eaf
-
SHA256
a4d27fafe403ade0e02963aa92c9a5af47c6e82cd58feb920fa57fd2d25bfe2e
-
SHA512
70f8be8e497fea1f35ba67230d92865818b49043307f37469e9fe6fdc4acb4f901acfc7106472b5b17e33b6b2687b0572bb23dd176a7b9ab7662cab598e93db7
-
SSDEEP
12288:0xIt6ltye1VwL8w32x5qQqNH+rJd/sI9IF3tvgIvIpc2DsIhSv2+f4okBcv1yR2m:V6ltGIwGvWelts7F3tvg0vpUD201Kq
Malware Config
Signatures
Files
-
file.exe.exe windows x64
3ce581ff921df76fb9af623b6d62e6ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
RegOpenKeyExA
user32
GetMenu
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE