Static task
static1
Behavioral task
behavioral1
Sample
5ba49717cb7caf306be4f9423a985d8ec650804e3f0fce998a02419e8d941c03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ba49717cb7caf306be4f9423a985d8ec650804e3f0fce998a02419e8d941c03.exe
Resource
win10v2004-20220812-en
General
-
Target
5ba49717cb7caf306be4f9423a985d8ec650804e3f0fce998a02419e8d941c03
-
Size
160KB
-
MD5
924a93ab50ca2084857f0282c921f980
-
SHA1
121a3eff7adf999ec15c7d958711b62abfcc053f
-
SHA256
5ba49717cb7caf306be4f9423a985d8ec650804e3f0fce998a02419e8d941c03
-
SHA512
6546dba9dc9911f74da972ef59112a992761b54556bd964e7a1ff158b87d44a01f58bb5e4824f2bae5016970ae3a7f4451ab0908709c62e5360c3895533378cd
-
SSDEEP
3072:Nmeo1T+H0msQHI2AtXxpHqX/OgT8hDOKR2Luo59Mg:IeGqNTUpKTT80H51
Malware Config
Signatures
Files
-
5ba49717cb7caf306be4f9423a985d8ec650804e3f0fce998a02419e8d941c03.exe windows x86
Code Sign
01Certificate
IssuerO=Internet Widgits Pty Ltd,ST=FF,C=GGNot Before24/04/2013, 20:53Not After24/04/2015, 20:53SubjectO=Internet Widgits Pty Ltd,ST=DF,C=GF96:9f:ac:33:06:b1:cb:8d:bf:4c:87:1d:b5:e9:9e:b2:a7:45:5f:9dSigner
Actual PE Digest96:9f:ac:33:06:b1:cb:8d:bf:4c:87:1d:b5:e9:9e:b2:a7:45:5f:9dDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateO=Internet Widgits Pty Ltd,ST=DF,C=GF18/10/2022, 20:53 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ