Static task
static1
Behavioral task
behavioral1
Sample
e3be4420fc72c65d8ebe91239355ecbd.exe
Resource
win7-en-20211208
General
-
Target
e3be4420fc72c65d8ebe91239355ecbd
-
Size
1.0MB
-
MD5
e3be4420fc72c65d8ebe91239355ecbd
-
SHA1
830289c9135b3a0e526390e27e3a00a37723c8df
-
SHA256
6de9b52d4498f6a5061d71b2851fbe5e5ba2cb1998891d807cb92dc0c210b8a3
-
SHA512
cec50e1b4907acd819ec17e41f085f2f9d139783a81448f676a9ba75462f1f1895ebca3501774f25199d0464c777e84f2b1e161e81eeffc56b2432ad04ef0af5
-
SSDEEP
24576:MnXEymipyzrKJtyew4Q56A/ed1+ITNcoTy8N3eoL73Tw:MAub/wD5u1+ocn+eoL73E
Malware Config
Signatures
Files
-
e3be4420fc72c65d8ebe91239355ecbd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7f:e5:80:18:35:5b:8b:a8:4b:69:3e:8c:ea:e8:07:6eCertificate
IssuerCN=Legitimacy,O=Sifters Machine Inc.,C=GQ,1.2.840.113549.1.9.1=#0c18616d70756c65736f736d6174657340676d61696c2e636f6dNot Before04-02-2022 21:00Not After11-02-2032 21:00SubjectCN=Legitimacy,O=Sifters Machine Inc.,C=GQ,1.2.840.113549.1.9.1=#0c18616d70756c65736f736d6174657340676d61696c2e636f6dbb:9c:4f:29:d9:15:8a:ea:b5:51:3b:b8:69:d0:e4:a1:07:65:97:87Signer
Actual PE Digestbb:9c:4f:29:d9:15:8a:ea:b5:51:3b:b8:69:d0:e4:a1:07:65:97:87Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Legitimacy,O=Sifters Machine Inc.,C=GQ,1.2.840.113549.1.9.1=#0c18616d70756c65736f736d6174657340676d61696c2e636f6d14-02-2022 17:36 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ