Static task
static1
Behavioral task
behavioral1
Sample
9bb32479c6ab4c4183e6786bb0c0209a9563adbc1a01f426e9c309b156c3c980.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9bb32479c6ab4c4183e6786bb0c0209a9563adbc1a01f426e9c309b156c3c980.exe
Resource
win10v2004-20221111-en
General
-
Target
9bb32479c6ab4c4183e6786bb0c0209a9563adbc1a01f426e9c309b156c3c980
-
Size
341KB
-
MD5
b71297fc07c65a8bbc77dc95d1370aec
-
SHA1
22f51ce0e1add2a9b5b9a58e0f9917a851ac4026
-
SHA256
9bb32479c6ab4c4183e6786bb0c0209a9563adbc1a01f426e9c309b156c3c980
-
SHA512
f47e63e7dddbd17e56ff08db586b87ecad425933a2b1caf55cfab544a246e037d26acfadce5d95173a92b8f48668e9adab696f94081c05e30ba8ce58c22a0970
-
SSDEEP
6144:dli+u8SuAKUFllL/eM8+m0/oIMEXCiWONRM3/GD7ClYGAmlLjXNlXXxNbJndgtN3:dm8HAxFlkM8+m0QIMESFmRU/QFvojXN+
Malware Config
Signatures
Files
-
9bb32479c6ab4c4183e6786bb0c0209a9563adbc1a01f426e9c309b156c3c980.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6dNot Before13-01-2015 10:44Not After13-01-2016 10:44SubjectCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6dee:e5:8c:a8:92:75:a7:33:3c:8e:50:f9:57:f0:49:48:68:5d:24:16Signer
Actual PE Digestee:e5:8c:a8:92:75:a7:33:3c:8e:50:f9:57:f0:49:48:68:5d:24:16Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Certilicious,OU=Certilicious Security Sector,O=Certilicious,L=New York City,ST=New York,C=us,1.2.840.113549.1.9.1=#0c15696e666f4063657274696c6963696f75732e636f6d24-11-2022 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 337KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ