Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
General
-
Target
file.exe
-
Size
822KB
-
MD5
32cd8686c862bb0045e6848aa79e4c03
-
SHA1
fa124ef62e7c72cc6a34855eb297c8b5ac59c0c4
-
SHA256
907bb593224151494fbb41c2e3edbe5b2391b711270e2625a3e5aeb42c6b574f
-
SHA512
275fa8ac2974c271c31dca3904edbc577e7f8b201a231770d20bb3099f7159f60c596600e234c8bb95798f3772ae2a3c5edce12a48b89a0cec340993657f0892
-
SSDEEP
12288:0xXYKi/ndL/168Ac4PAUqdRy4nTgnGEsMuh/EwlmYeC3u0zYp:3ndLd68AhA3dRJTgztwlxXu00p
Malware Config
Signatures
Files
-
file.exe.exe windows x64
3fe6876bed7619e3af273f55e515527c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
RegOpenKeyExA
user32
DefWindowProcA
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE