Behavioral task
behavioral1
Sample
4f29fff3758fb9fa466d2c68b8f814b0104ec5ae60efd714a6b9e67313a7ed85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f29fff3758fb9fa466d2c68b8f814b0104ec5ae60efd714a6b9e67313a7ed85.exe
Resource
win10v2004-20220812-en
General
-
Target
4f29fff3758fb9fa466d2c68b8f814b0104ec5ae60efd714a6b9e67313a7ed85
-
Size
32KB
-
MD5
72078fb5cdc5a1ee34241c76d08c381c
-
SHA1
49749e4e458d904a69427781a41f4f2faadb15b3
-
SHA256
4f29fff3758fb9fa466d2c68b8f814b0104ec5ae60efd714a6b9e67313a7ed85
-
SHA512
ccfb09bb9b1cc5143ab2e31c23c721ca7821bea2fd726ca34df64f575f364b3b1a84a24c9db89f17a96b6cfc696f5cd5f3dfcdc81cf04b0ae85e3b9b4aaf0a00
-
SSDEEP
768:mkzoB3fHSSE1819tXcxkMlVCN8onbcuyD7UDDC0h4UQxWyW0lA:my8SSTsKMlVCZnouy8DDPh4UQxWyW0lA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4f29fff3758fb9fa466d2c68b8f814b0104ec5ae60efd714a6b9e67313a7ed85.exe windows x86
Code Sign
32:25:fb:5a:95:d0:75:82:45:45:99:be:4e:85:fb:b1Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009 CANot Before17/10/2009, 16:00Not After18/10/2012, 16:00SubjectCN=Games Software Helper Tools23:35:a9:ef:3a:6f:3d:64:b1:cf:8d:1f:62:ad:bd:a0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009 CANot Before30/09/1999, 16:00Not After16/07/2036, 16:00SubjectCN=VeriSign Class 3 Code Signing 2009 CA41:b9:ab:75:18:1a:66:47:5a:df:9d:c0:ab:b3:99:e9:ff:42:c3:01Signer
Actual PE Digest41:b9:ab:75:18:1a:66:47:5a:df:9d:c0:ab:b3:99:e9:ff:42:c3:01Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Games Software Helper Tools29/09/2022, 18:51 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE