Static task
static1
Behavioral task
behavioral1
Sample
28891ad0b76caff70e56cc4002aeef4e8a0c1d3538f27c2ee92aab36b414cdea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28891ad0b76caff70e56cc4002aeef4e8a0c1d3538f27c2ee92aab36b414cdea.exe
Resource
win10v2004-20220901-en
General
-
Target
28891ad0b76caff70e56cc4002aeef4e8a0c1d3538f27c2ee92aab36b414cdea
-
Size
541KB
-
MD5
44e1b2376b9bbfe9dd4e01026e54645d
-
SHA1
6cfe9b0fcd28220309da2bd4d7b40c39e6bfbbef
-
SHA256
28891ad0b76caff70e56cc4002aeef4e8a0c1d3538f27c2ee92aab36b414cdea
-
SHA512
69e2c193e1c8e14145000e9e87c7a47a716b479764384df77785beab71247809394a14f197b939ae3d14f9ef5e661cbb62ad2f5653bd8f9c0bcf3d9455ceafd9
-
SSDEEP
12288:622/oXA34IaXN7mWegdFpZXeComeaTl8oocQDe:AoQ34IaXZ1eSnJUc9
Malware Config
Signatures
Files
-
28891ad0b76caff70e56cc4002aeef4e8a0c1d3538f27c2ee92aab36b414cdea.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
1e:02:a6:42:61:dd:17:b8:4c:15:6b:0f:aa:8f:65:3eCertificate
IssuerCN=DESKTOP-PI7MR5R\\UserNot Before13/10/2022, 14:15Not After13/10/2023, 20:15SubjectCN=DESKTOP-PI7MR5R\\Usereb:73:7c:85:74:dc:5a:72:01:0b:b3:e1:86:61:90:03:5f:1e:5b:48:95:54:33:06:d5:d8:81:2b:4f:bf:9b:81Signer
Actual PE Digesteb:73:7c:85:74:dc:5a:72:01:0b:b3:e1:86:61:90:03:5f:1e:5b:48:95:54:33:06:d5:d8:81:2b:4f:bf:9b:81Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=DESKTOP-PI7MR5R\\User18/10/2022, 20:53 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ