Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
976KB
-
MD5
cf061dab06a8289194712e53600e1be4
-
SHA1
50fe06da272b49067f8bf87f1d2b73b241442c8f
-
SHA256
2cfdf5f91021b8b4fc36341094aa78322e8e16519d562648585eb5228a9fc32c
-
SHA512
4e6f0ad99cb381dbf76e00d17f58a5be48a4380e184eaf7277016d31657531ef5f7c056656ef9e480a0d16048956355e42afb98f93fcc36be03a456cc56538f7
-
SSDEEP
12288:n8XDIhc9coQEoreo0K4TUK2nGNBX7quBLUgktKuMuZ+477Ab8TRIaDXcX33QMdOX:sDIhcGoZQg7BXxLouo+4k1lX3g
Malware Config
Signatures
Files
-
file.exe.exe windows x64
beba494c4d657e3410c84aa2422f1584
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
CopyRect
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE