Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
1005KB
-
MD5
5b6ff063bc0fcdf6c6221681df67402f
-
SHA1
359c726b8f7f9baa36b7933632df1dba6c028ba5
-
SHA256
f17cedbbed84b320c838ecc1870587b088c01bc50938b02339aa8051823c587b
-
SHA512
ee666eb70016e1ea430a53247a8df4c70feda38f83a69434051fda0e6c43a713b80c5b01b36963654eecfda1d5853136858c3bf94da926b532314eaabb981526
-
SSDEEP
24576:qvrUz3MkUSZ+A+kJEZ5db/I7DZyXUxSKQEF6DPCXAS5FNB6xa:1JEd7I7DZyEEEYkNB2
Malware Config
Signatures
Files
-
file.exe.exe windows x64
d5c39680122925888153e2002f968dbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
GetUserNameA
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 417KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE