Static task
static1
Behavioral task
behavioral1
Sample
4f6d22a426285f80e98e11165b815f0a9ada3d52c37864d966f275e5796d1079.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f6d22a426285f80e98e11165b815f0a9ada3d52c37864d966f275e5796d1079.exe
Resource
win10v2004-20220812-en
General
-
Target
4f6d22a426285f80e98e11165b815f0a9ada3d52c37864d966f275e5796d1079
-
Size
1.1MB
-
MD5
2c2bc627debe235ae57f771541e12573
-
SHA1
c1811edfc2a7c40e2a455eec91aae48519d91b71
-
SHA256
4f6d22a426285f80e98e11165b815f0a9ada3d52c37864d966f275e5796d1079
-
SHA512
0e1b9ba671ddd2dc2b1c2c15ab283df4170bed1c0da8ea03d28a176edcc131548b338539f2ff39926258b0b9cda4588bbb200be38ed0564f5caee615871f20a7
-
SSDEEP
24576:5Mc/qPPwx7HOHy9KUPlZ3KpahUcSBVKryZ9:5jWwsy9KSTEnBVvD
Malware Config
Signatures
Files
-
4f6d22a426285f80e98e11165b815f0a9ada3d52c37864d966f275e5796d1079.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=BestCert Ltd.,OU=BestCert Certification Department,O=BestCert Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c11696e666f4062657374636572742e636f6dNot Before17/11/2014, 17:31Not After17/11/2015, 17:31SubjectCN=BestCert Ltd.,OU=BestCert Certification Department,O=BestCert Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c11696e666f4062657374636572742e636f6d13:e6:2a:f8:4e:d8:b8:1c:b6:cb:67:72:46:10:4b:f9:ac:ab:db:03Signer
Actual PE Digest13:e6:2a:f8:4e:d8:b8:1c:b6:cb:67:72:46:10:4b:f9:ac:ab:db:03Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=BestCert Ltd.,OU=BestCert Certification Department,O=BestCert Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c11696e666f4062657374636572742e636f6d17/11/2022, 13:16 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 916KB - Virtual size: 915KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ