Static task
static1
Behavioral task
behavioral1
Sample
7a596b7c048f56998ab669f350f025a3b5f4e2fd7d92519785bb19e28c144512.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a596b7c048f56998ab669f350f025a3b5f4e2fd7d92519785bb19e28c144512.exe
Resource
win10v2004-20220901-en
General
-
Target
7a596b7c048f56998ab669f350f025a3b5f4e2fd7d92519785bb19e28c144512
-
Size
455KB
-
MD5
320c4b8a61ec6c32154e14915f8ce060
-
SHA1
8ce12dcba64e64b2e69e4c7ef4d8f2dfb0aa5180
-
SHA256
7a596b7c048f56998ab669f350f025a3b5f4e2fd7d92519785bb19e28c144512
-
SHA512
fc9bd18541b2f1cc5fbf8ca5232e86dac22e45a753d931c578233ae91ae4dfde1e6a47cbf9044d1c4c08a657834db09c492e14e066344b7014d763d151ceced2
-
SSDEEP
6144:+ZxSbcC+KGz23XFY4lwdwQyxBhBQopNeFJ/8b5I:+scuGqnFY4lwdwQyxBhBQopNeLb
Malware Config
Signatures
Files
-
7a596b7c048f56998ab669f350f025a3b5f4e2fd7d92519785bb19e28c144512.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.xb0xdna.com,OU=Modification,O=xb0xdna.com,L=California,ST=Orlando,C=us,1.2.840.113549.1.9.1=#0c13737570706f72744078623078646e612e636f6dNot Before23/07/2015, 21:09Not After22/07/2016, 21:09SubjectCN=www.xb0xdna.com,OU=Modification,O=xb0xdna.com,L=California,ST=Orlando,C=us,1.2.840.113549.1.9.1=#0c13737570706f72744078623078646e612e636f6d72:66:5f:2a:62:59:0c:24:96:ff:12:e3:0d:f9:50:16:19:1f:08:1bSigner
Actual PE Digest72:66:5f:2a:62:59:0c:24:96:ff:12:e3:0d:f9:50:16:19:1f:08:1bDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.xb0xdna.com,OU=Modification,O=xb0xdna.com,L=California,ST=Orlando,C=us,1.2.840.113549.1.9.1=#0c13737570706f72744078623078646e612e636f6d29/09/2022, 18:53 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ