Static task
static1
Behavioral task
behavioral1
Sample
hello.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
hello.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
hello.exe
Resource
macos-20220504-en
Behavioral task
behavioral4
Sample
hello.exe
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
hello.com
-
Size
952KB
-
MD5
bfcf6557c5a4b86b90e13bedd6a42087
-
SHA1
a0512191b5f18f0ab794b448f4866250c326d2c6
-
SHA256
236d5b0ad50c58a4c23b0080bc555c543b90afdef239ddec1ce2f4fa34849c09
-
SHA512
99a90eee3176a561dcb99533d509e98f522e1fa3fca0f1d5df4d33675038c1d5a4ddf80e664fc282a33fa53f02583aea1bd598584a024d09cfc5c6ca21d42288
-
SSDEEP
24576:jRa8fXfwkros1tJ8QD0RywEiE1g5sIgihnL08n:9ZXos3JFoTEiFgiG8
Malware Config
Signatures
Files
-
hello.com.exe windows x64
28b4c77a0d3d00e3356f297688caadfe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateFileMappingW
CreateFileW
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandleEx
GetFileType
GetFinalPathNameByHandleW
GetLastError
GetModuleFileNameW
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathW
MapViewOfFileEx
SetConsoleCP
SetConsoleMode
SetConsoleOutputCP
SetFilePointerEx
SetLastError
SleepEx
TlsAlloc
UnmapViewOfFile
VirtualProtect
WriteFile
Sections
.text Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE