Static task
static1
Behavioral task
behavioral1
Sample
2.exe
Resource
win7-20220901-en
General
-
Target
2.txt
-
Size
326KB
-
MD5
3f1e50958700acd8a73c93adf3c8ad67
-
SHA1
f0b3b1d3b91ff226aa6c37b385bd4758c10c78f1
-
SHA256
da1bf3ab8e29f703417382a333d6af0c6e267d6f8baf9ad4cab337e9fed5bfbc
-
SHA512
14e2bee05a60c2b7ab3330c9a991acf579239ccd36cf7d3191d41e84b2818558032dba87b0fa25f9df8cb4e517fb0ecdc96d04c7895cdc0fcb76adb7e7cfb359
-
SSDEEP
6144:2bdg3BGoVtrnsMA4byW2idwYqw9rteMH9O1BNI:2bsLVtrsIbyydwKteMo7I
Malware Config
Signatures
Files
-
2.txt.exe windows x64
9d63601b75db6820cb6e18c76c455c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcess
InitializeProcThreadAttributeList
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UpdateProcThreadAttribute
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 140B
_sysc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ