Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
1.1MB
-
MD5
a6aa67a15582de078d00d7a98881215f
-
SHA1
5f19678e86fc785e316261b2bc7192c6f69072e9
-
SHA256
100294d2e6ded598e40fa44b34bfed2bd60211260d5b9dcb95caa98e682338e4
-
SHA512
cdb8a855695755d95a4c04c27b88a6071ec199512daeabcf7b2719598df8ce0f4f4197ed6acbeedc30fe5dcd45c5e0355ed92ef33cfb457f93114f01c99bc4ce
-
SSDEEP
24576:XPcxDe8vrUz3MkUSZ+AEJI+6t87RZ4rHvvducYMjz+WjTt:XPKMK4rP0cYc1t
Malware Config
Signatures
Files
-
file.exe.exe windows x64
d7acd7dbea9ae8eec07ac4e704bf1b08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegOpenKeyExW
user32
CharLowerW
kernel32
GetModuleHandleA
Sections
.rsrc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE