Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
1.2MB
-
MD5
4a74763c4112f44db875b9f3cb7e7f33
-
SHA1
4a9fca1381845f335de675ca8b6960d3591bc7c6
-
SHA256
9e6d56bf3b22b30a66bbc2133937a6b1e9da6e8996aa5fa2f7afde1854494890
-
SHA512
5e21259f00b7bfbb146a9e98dd3237f30ccb58eafce10800ca0f2d7349b6fc43e2a811603cd8d3d77ec699d3969beeaaf457eedeae6e08d0fcd5555be402ff73
-
SSDEEP
24576:ZvrUz3MkUSZ+AGSZgZP7mxjNhjTeWz9N0rgXZhN8:8ZgdIjXSyBLN
Malware Config
Signatures
Files
-
file.exe.exe windows x64
c899a088afffb1d64cdeec0eb7a3ef57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
CreateWindowExA
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE