Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
863KB
-
MD5
57e5d975aff9e9ee9eeaa61fd5aae4a3
-
SHA1
fb16b19af73c1b1ba54156e37af66bc0509dfd70
-
SHA256
3c46ba4890e9d75c0f18c6512f7edf8f19b1d2f1c75af5eb8f89ae823133dd71
-
SHA512
7090643dbd7def96d0a75285b8c795761975e9354e827ed757d7e5cffd3da48b51d1b655071c30badbf2dcc9a71c132cbd5555179490e40307ca34ec9808467a
-
SSDEEP
12288:O8yUI9ZU/AmrlBbt/KFdGQ9k2ZmYJvuB3vb8TbwcOwxDIFlj9u1TjPP:rGZUhHNKh91mYVqfbOxDIQB
Malware Config
Signatures
Files
-
file.exe.exe windows x64
6aaecd6793e5a26fe2821de549d547f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHChangeNotifyRegister
mscoree
_CorExeMain
advapi32
RegOpenKeyExW
user32
DefWindowProcW
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE