Static task
static1
Behavioral task
behavioral1
Sample
Windowsfig.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Windowsfig.exe
Resource
win10v2004-20230220-en
General
-
Target
Windowsfig.exe
-
Size
108KB
-
MD5
40528a8ce542af784cb9958552f7798d
-
SHA1
58c5ba782f367a1d65bf712ada150fe0b5e14292
-
SHA256
46780be1f3276ff325e105b85d5cac13b1eae75b04d17340bca01c7d63027cfc
-
SHA512
dad82f72882e2a7ca2fe4cea7360150bdffe394dca582f7afdc378ff6e77578e3dd12da668bf2297532b3d2475d97838571cca6343c4a7515d26449acf287e0a
-
SSDEEP
1536:tR9oCsF5QIhH12yXZgo98bFgZneBwNeqDSz/JWL50AUfozmmPV:5oCsF5T1Q+Zgoq6EBwNt+7O0Avz9
Malware Config
Signatures
Files
-
Windowsfig.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ