Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.2MB
-
MD5
9f13d56aea4bd799ea558a312e9fb636
-
SHA1
8bbcbe3bd1a026761d0eb37ec1b6a13d0769c152
-
SHA256
6ab8c6ec52dcb696f30da7d35c3b5e1cf7d429a9283ed44e7f459735e48217f1
-
SHA512
9f02af478455c6247fd05d7b7739e74cccd8a17b393142b9202ef985af8208b951e1fe932f7c5885e07e5f3aa0ffecef8eee94441d669b43c4dedd4ec78283eb
-
SSDEEP
24576:P2Z66zFMVZRUvrUz3MkUSZ+AEkkbZzTeme2tYCI6aboSBWTPbjQlo2vTLMfi:OZ66zFMVZRFkb57ET7WTjslo2B
Malware Config
Signatures
Files
-
file.exe.exe windows x64
aaabbebc710821afd96de81aaf86cbc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
ScrollDC
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE