Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
General
-
Target
file.exe
-
Size
909KB
-
MD5
bb4957c2da56d782936816124edf12ba
-
SHA1
af359d2a0fe9b919a6cec438f7865535ae89c817
-
SHA256
7ced0f3f9cecadf17b8aa6f6532a5d8e73680e8f771d4f82053108bc7bf67df2
-
SHA512
f21e6d416402ad508c5bb001e4c493d10f3c6657fd128a4f6fd3aa559573f56b03f6beecd9f2493b70a9e0419e830efe9bf714984861a4dde12a77cd692d0126
-
SSDEEP
24576:cvrUz3MkUSZ+Ay2wZeVUqGOWvtFPXo0gH9RBS3UfiDR6rlar:TwmU7zH6dRBHfiI
Malware Config
Signatures
Files
-
file.exe.exe windows x64
8ce5ce0576ee7c7aa6eade3948c2909b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
CreateWindowExW
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE