Static task
static1
Behavioral task
behavioral1
Sample
a9977160be1976443efdcb44a80a8e9b56a5669cca787e48893649d6e263be61.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9977160be1976443efdcb44a80a8e9b56a5669cca787e48893649d6e263be61.exe
Resource
win10v2004-20220812-en
General
-
Target
a9977160be1976443efdcb44a80a8e9b56a5669cca787e48893649d6e263be61
-
Size
160KB
-
MD5
0892d27e7441b9e7c039d7b799337cd0
-
SHA1
73367dc13858c61f3e392bbc6ac140a8af9e6ff4
-
SHA256
a9977160be1976443efdcb44a80a8e9b56a5669cca787e48893649d6e263be61
-
SHA512
78d9dfe014b565447bc2dfa1c360bff6e39a3903ccbd51aaa60dbd43223b99b5d2066c631c90a2aee9c9de92e23e910fba480bd17268b096f2d43cb386139a12
-
SSDEEP
3072:hmAo1T+H0mstnDYhQWHQ/dz8JhiMzeHSlmZ7PrSymN:MAGqYPFd4J4MzeHSiSyi
Malware Config
Signatures
Files
-
a9977160be1976443efdcb44a80a8e9b56a5669cca787e48893649d6e263be61.exe windows x86
Code Sign
01Certificate
IssuerO=Internet Widgits Pty Ltd,ST=FF,C=GGNot Before24/04/2013, 20:53Not After24/04/2015, 20:53SubjectO=Internet Widgits Pty Ltd,ST=DF,C=GF26:01:73:91:89:e3:a1:e0:cb:80:b0:a5:08:10:8f:56:dd:62:fa:1aSigner
Actual PE Digest26:01:73:91:89:e3:a1:e0:cb:80:b0:a5:08:10:8f:56:dd:62:fa:1aDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateO=Internet Widgits Pty Ltd,ST=DF,C=GF04/11/2022, 15:42 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ