Static task
static1
Behavioral task
behavioral1
Sample
6b270b00cb5319e9fa07ddd11ab9c448ba7b8e43a95a375fe22667b94930f20d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b270b00cb5319e9fa07ddd11ab9c448ba7b8e43a95a375fe22667b94930f20d.exe
Resource
win10v2004-20220901-en
General
-
Target
6b270b00cb5319e9fa07ddd11ab9c448ba7b8e43a95a375fe22667b94930f20d
-
Size
658KB
-
MD5
dbb2a531ee441c23f6e3386886d9c825
-
SHA1
73705c51dfb599fd65997e31921788d95484a836
-
SHA256
6b270b00cb5319e9fa07ddd11ab9c448ba7b8e43a95a375fe22667b94930f20d
-
SHA512
680eb9cc6786499e5f5cba504a50022148ea058306f8d69b337dd76923d37565d63c97bcaa3ffeb0db04b82a355e17220a9ee82e12841474936f088662816155
-
SSDEEP
12288:l+QxPYW3RupfoGlGFRhLGziyBBzKD2m9B7C9+KMZ/45SUilMrQnlO:Hb+f8pLHNDp9VC0ZQ8Ui+rQ
Malware Config
Signatures
Files
-
6b270b00cb5319e9fa07ddd11ab9c448ba7b8e43a95a375fe22667b94930f20d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=CertPro Ltd.,OU=CertPro Ltd. Security Department,O=CertPro Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c1664656c697269756d67687340686f746d61696c2e6772Not Before30/08/2014, 02:09Not After08/05/2028, 02:09SubjectCN=CertPro Ltd.,OU=CertPro Ltd. Security Department,O=CertPro Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c1664656c697269756d67687340686f746d61696c2e6772d1:a6:a0:a9:d8:3a:cf:1d:f0:83:63:e8:26:dd:00:51:93:5e:f9:abSigner
Actual PE Digestd1:a6:a0:a9:d8:3a:cf:1d:f0:83:63:e8:26:dd:00:51:93:5e:f9:abDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=CertPro Ltd.,OU=CertPro Ltd. Security Department,O=CertPro Ltd.,L=Chicago,ST=IL,C=us,1.2.840.113549.1.9.1=#0c1664656c697269756d67687340686f746d61696c2e677224/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ