Static task
static1
Behavioral task
behavioral1
Sample
d2a5b25f23d183239661f4c5f9d61f7feb8f2b02bd06c66ade068c52e4dc04cd.exe
Resource
win7-20220812-en
General
-
Target
d2a5b25f23d183239661f4c5f9d61f7feb8f2b02bd06c66ade068c52e4dc04cd
-
Size
62KB
-
MD5
4111e487c77a59d4a47f8434633f2a50
-
SHA1
49ffda83ff855ae2245fa0e4da6846b3c5b9c3e2
-
SHA256
d2a5b25f23d183239661f4c5f9d61f7feb8f2b02bd06c66ade068c52e4dc04cd
-
SHA512
5e38f24b9a634f533771e2b68e33f1baf526b6b46442ec53667d7eea8b4cc02e4fc9f5d66fc2ff5a70302de5d83ded527c7be4fdbd03307c59c2a6a9956960ca
-
SSDEEP
1536:KpeZE7Hhy2kU7QC1TCqqozPp6DZfec2vcVFwCm/u1TA:KpeZKByjqqojEDx2vcAJ/ue
Malware Config
Signatures
Files
-
d2a5b25f23d183239661f4c5f9d61f7feb8f2b02bd06c66ade068c52e4dc04cd.exe windows x86
23cf40211ef81287fd50a6b0a21b76a2
Code Sign
2d:e3:07:0d:3d:9c:bc:75:b2:40:0f:d6:bb:3b:c3:e5Certificate
IssuerCN=ArawaawariNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Arawaawari09:33:75:46:5f:2d:7e:e0:d7:1b:69:fe:a0:46:23:ed:74:20:aa:32Signer
Actual PE Digest09:33:75:46:5f:2d:7e:e0:d7:1b:69:fe:a0:46:23:ed:74:20:aa:32Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Arawaawari29/09/2022, 18:51 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsGUIThread
FindWindowA
kernel32
GetModuleHandleA
WaitForSingleObject
GetVersion
CreateThread
ExitProcess
GetProcAddress
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE