Static task
static1
Behavioral task
behavioral1
Sample
fd3f7234018507de67931f56c7691df8f17132c8f6047f3ce2a71280a4c92853.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd3f7234018507de67931f56c7691df8f17132c8f6047f3ce2a71280a4c92853.exe
Resource
win10v2004-20220812-en
General
-
Target
fd3f7234018507de67931f56c7691df8f17132c8f6047f3ce2a71280a4c92853
-
Size
862KB
-
MD5
6903e2e22038e5f3cd09202666568bfd
-
SHA1
e41731a588f0fd20ac8fb775256418f204ece5d2
-
SHA256
fd3f7234018507de67931f56c7691df8f17132c8f6047f3ce2a71280a4c92853
-
SHA512
e364ba86bd9f04b0459b53ea9a708fdae225006f92ec40325562be272aa236e254b7b93e85a43faa625c64a13d1ca810434b9737fe822ae0ba1d4024a87c67a5
-
SSDEEP
12288:OsjyK8aLGp/9zjL60ZCmuByJw4TQj+ULUofxgCg5R:O0Kp/V2cuBU/TQj+UTfxgCgz
Malware Config
Signatures
Files
-
fd3f7234018507de67931f56c7691df8f17132c8f6047f3ce2a71280a4c92853.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6dNot Before13/01/2015, 10:44Not After13/01/2016, 10:44SubjectCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6d18:6a:ed:05:5c:dd:cf:96:18:c0:3d:b3:b1:32:d5:4c:13:5a:68:98Signer
Actual PE Digest18:6a:ed:05:5c:dd:cf:96:18:c0:3d:b3:b1:32:d5:4c:13:5a:68:98Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6d04/11/2022, 15:40 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 495KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ