Static task
static1
Behavioral task
behavioral1
Sample
1235fa377fd854ff8c082bbdbadc77dead05dbc1469746902a6757637944808f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1235fa377fd854ff8c082bbdbadc77dead05dbc1469746902a6757637944808f.exe
Resource
win10v2004-20221111-en
General
-
Target
1235fa377fd854ff8c082bbdbadc77dead05dbc1469746902a6757637944808f
-
Size
926KB
-
MD5
24dc548e5507bf2cce77e525d7076d69
-
SHA1
96950460a0a6a582b830499219956c09b35c3a0a
-
SHA256
1235fa377fd854ff8c082bbdbadc77dead05dbc1469746902a6757637944808f
-
SHA512
45dac5b07242bf234d65be59fec510c2421cf89210f70806f9b6dc3dd206cafbb27311e827ec665087fbb56b7e0bdad6f25ff4530101efbe8cf8807a7bb5e9c1
-
SSDEEP
12288:64vpo1rld24/oW+uP6JY98+iGG/AgzEO05XcEbYbRANkuob+Ab+7uEgpznIECAKJ:62pqld2AefYlmB1XdCkuoiAiSEOI9p
Malware Config
Signatures
Files
-
1235fa377fd854ff8c082bbdbadc77dead05dbc1469746902a6757637944808f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.Microsoft.com,OU=Marketing,O=Microsoft,L=SanFran,ST=California,C=us,1.2.840.113549.1.9.1=#0c15636f6e74616374404d6963726f736f66742e636f6dNot Before21/06/2015, 14:38Not After19/06/2016, 14:38SubjectCN=www.Microsoft.com,OU=Marketing,O=Microsoft,L=SanFran,ST=California,C=us,1.2.840.113549.1.9.1=#0c15636f6e74616374404d6963726f736f66742e636f6d7e:27:d5:44:66:c4:03:fe:fb:ad:cc:d4:fd:cf:14:7e:ce:08:bd:90Signer
Actual PE Digest7e:27:d5:44:66:c4:03:fe:fb:ad:cc:d4:fd:cf:14:7e:ce:08:bd:90Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.Microsoft.com,OU=Marketing,O=Microsoft,L=SanFran,ST=California,C=us,1.2.840.113549.1.9.1=#0c15636f6e74616374404d6963726f736f66742e636f6d24/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 887KB - Virtual size: 886KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ