Static task
static1
Behavioral task
behavioral1
Sample
59a8083391f2d47e161cf0caa51da1ea77898657941279135a3a66e10dfc1237.exe
Resource
win10v2004-en-20220113
General
-
Target
59a8083391f2d47e161cf0caa51da1ea77898657941279135a3a66e10dfc1237
-
Size
465KB
-
MD5
c71425e3cc3c2e52e15f6554d510e6a8
-
SHA1
136db115777778a0ecb9d459d3ace8c98542aafb
-
SHA256
59a8083391f2d47e161cf0caa51da1ea77898657941279135a3a66e10dfc1237
-
SHA512
b0838277e82abe6e2df4cbf899d72c7faf92874800a6dd5fae4f9b6effa45543cbcd5cca934c351942ddfb52db3a0fc399199d7497faa079e8ed82ad77c536ba
-
SSDEEP
12288:kasJ9dfdFRXVyBwC0oTDDsExP3ov+fs0M6DLp90m+2eu1:W9dfo0oTDDsEav+fs+DPl+W1
Malware Config
Signatures
Files
-
59a8083391f2d47e161cf0caa51da1ea77898657941279135a3a66e10dfc1237.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
1f:dc:80:f7:5f:dc:ed:85:4a:cd:8c:9a:98:d4:cb:fcCertificate
IssuerCN=Recoverer,O=Dichords Lifer Inc.,C=SD,1.2.840.113549.1.9.1=#0c196d616c74696e677369726c6f696e7340676d61696c2e636f6dNot Before17-02-2022 21:00Not After24-02-2032 21:00SubjectCN=Recoverer,O=Dichords Lifer Inc.,C=SD,1.2.840.113549.1.9.1=#0c196d616c74696e677369726c6f696e7340676d61696c2e636f6deb:dc:8a:00:0c:49:35:03:da:5b:8a:29:e6:e9:94:5b:dd:61:5a:0bSigner
Actual PE Digesteb:dc:8a:00:0c:49:35:03:da:5b:8a:29:e6:e9:94:5b:dd:61:5a:0bDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Recoverer,O=Dichords Lifer Inc.,C=SD,1.2.840.113549.1.9.1=#0c196d616c74696e677369726c6f696e7340676d61696c2e636f6d24-02-2022 21:40 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ