Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
784KB
-
MD5
7d1846beef1a0c3b7f4f7ff564b55ffa
-
SHA1
f153f4003589e0db9c2fbc9ea757381bb0c046db
-
SHA256
f0dcfbc6e7f23dc6c462cee30de2873dd1b907bdce88ffa647c44ab2ace75338
-
SHA512
20ddd4b337d89b2525d36070d3541bc8b9e81c03bd2af9781a0d928dfe46a14090e3408fdf53ce497cfb63e8a7e9d65f8192305c1350b4ebbc013c3cda7eb228
-
SSDEEP
12288:Yx3LOt3Wv5SnOtpIfFQbqXlPIrA2SMQKa94jLky8rMSNVL3OeSr:WOtmv5SnOtp4YrOdqcES7
Malware Config
Signatures
Files
-
file.exe.exe windows x64
09de21dc5ad42436b12d4ca9754397fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
GetDlgItem
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE