Static task
static1
Behavioral task
behavioral1
Sample
b12a1fa92385401e41412dbee9f20586.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
b12a1fa92385401e41412dbee9f20586.exe
Resource
win10v2004-20220414-en
General
-
Target
b12a1fa92385401e41412dbee9f20586
-
Size
417KB
-
MD5
b12a1fa92385401e41412dbee9f20586
-
SHA1
6e0ef6df744bc30d5a8673232a6c21d9c3769bf2
-
SHA256
12f18490e690ffb027db41bc22d126b89b7ef04b8585e67559e60d176b5039fc
-
SHA512
df223ed0e3f3199428fc7a181a4965a211f23718a048d91e069d61563d7897b976ff7b05960eb01ca30ea31c14ea7a91c1e4e85039430637321925065dc74fd5
-
SSDEEP
12288:ucWWZ3xIwfqj57OxtKe7MIUlrH5C4Br4/1Iq:ZW+ujFkhzUFH/r01Iq
Malware Config
Signatures
Files
-
b12a1fa92385401e41412dbee9f20586.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
62:38:5f:2f:de:b3:0e:81:41:fb:8a:2b:83:8f:8d:ffCertificate
IssuerCN=Doomsmen,O=Chamber Silers Inc.,C=IN,1.2.840.113549.1.9.1=#0c196174656c696572667265656265657340676d61696c2e636f6dNot Before29-05-2022 21:00Not After05-06-2032 21:00SubjectCN=Doomsmen,O=Chamber Silers Inc.,C=IN,1.2.840.113549.1.9.1=#0c196174656c696572667265656265657340676d61696c2e636f6d4c:c4:08:c0:86:2a:a9:9b:3b:ec:e9:cf:8e:c7:d8:28:be:af:7d:afSigner
Actual PE Digest4c:c4:08:c0:86:2a:a9:9b:3b:ec:e9:cf:8e:c7:d8:28:be:af:7d:afDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Doomsmen,O=Chamber Silers Inc.,C=IN,1.2.840.113549.1.9.1=#0c196174656c696572667265656265657340676d61696c2e636f6d09-06-2022 15:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 413KB - Virtual size: 413KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ