Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
3.4MB
-
MD5
b9341eca3593111f5a8545e2d4101064
-
SHA1
4da702a31d5a3fa62d71923be4b85be494e62b62
-
SHA256
55c97066f408cdbdec892b89cf8eca10f48d9566a7bd36767ed0f3e8ed311e94
-
SHA512
aace1f1bfeae64277037f2591836eb3ece9ad5f6dc1eda164b9499e062fcd09ea033b6131b67dfb44e43e38015d79d7f5343846bb2412d527c2e6771440a8e8b
-
SSDEEP
24576:6qxsO9r2JQraBpA7NblIFX0oQwvohAOzj/zNx9vLcmdgj9e/z0mSlLi:6qSBQaCcXdQwOr3zj9vLcxJC0mS
Malware Config
Signatures
Files
-
file.exe.exe windows x64
69592e0cf045e2d24989c22013a2a660
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutA
mscoree
_CorExeMain
advapi32
RegOpenKeyExA
user32
GetMenu
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE