Static task
static1
Behavioral task
behavioral1
Sample
d565879b7a126839d5c5840362a57fbf9bc8f0ec17317ae0d0f6e1cfbf127ea9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d565879b7a126839d5c5840362a57fbf9bc8f0ec17317ae0d0f6e1cfbf127ea9.exe
Resource
win10v2004-20221111-en
General
-
Target
d565879b7a126839d5c5840362a57fbf9bc8f0ec17317ae0d0f6e1cfbf127ea9
-
Size
539KB
-
MD5
96aa773fc79a1217fe5345766d43616f
-
SHA1
a0bc206b6b0a571a05fa3b83751798bbdb64019e
-
SHA256
d565879b7a126839d5c5840362a57fbf9bc8f0ec17317ae0d0f6e1cfbf127ea9
-
SHA512
af5ec8595053462a24f84a98afafdc7736bc6c6a9ef45559841de2db10ca68246f0585e21d7d1f0c938db530ca3732f53d36e731664da2ec973764187c918a61
-
SSDEEP
12288:O4x+gkblZVT4LcN6gPoMgCokys3c55cuD:O4Ug4lcSZPsC1ys3c5
Malware Config
Signatures
Files
-
d565879b7a126839d5c5840362a57fbf9bc8f0ec17317ae0d0f6e1cfbf127ea9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
0c:72:7a:b7:d9:e9:5a:4d:99:77:b5:82:42:c9:b2:99Certificate
IssuerCN=gvmeipkfNot Before01/01/2001, 05:00Not After31/12/9999, 23:59SubjectCN=gvmeipkffa:a8:4a:c6:03:32:d5:82:6f:6f:e7:bd:87:d1:c4:12:c9:bf:8d:6dSigner
Actual PE Digestfa:a8:4a:c6:03:32:d5:82:6f:6f:e7:bd:87:d1:c4:12:c9:bf:8d:6dDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=gvmeipkf17/11/2022, 13:18 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ