Static task
static1
Behavioral task
behavioral1
Sample
dd6cf11415562b4930ceaccbb9307a74004cc94bfbdfcbf51ee5ab0b62e4cbef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd6cf11415562b4930ceaccbb9307a74004cc94bfbdfcbf51ee5ab0b62e4cbef.exe
Resource
win10v2004-20220812-en
General
-
Target
dd6cf11415562b4930ceaccbb9307a74004cc94bfbdfcbf51ee5ab0b62e4cbef
-
Size
566KB
-
MD5
942dbd1dfecdf7253ab850644111f2b9
-
SHA1
5e55ea34e643875ec1c20338fa0fb5b0ec4636e9
-
SHA256
dd6cf11415562b4930ceaccbb9307a74004cc94bfbdfcbf51ee5ab0b62e4cbef
-
SHA512
0cdd610091fb1f233d6757bdb1b8f6ab303cfd2b304db617e719b4fbeca5c0e026617487d7625fd43d831610d5a318f4fa997d6df09b205e9eca63c7e8b6aa67
-
SSDEEP
6144:oAvl3xgsH6pxGCdilfKjrSmoHc7VCYaavql6eQdsNv6KKxho8rTHE4Ri:oA16O6qCYyjhb7dvqc5sNur7EWi
Malware Config
Signatures
Files
-
dd6cf11415562b4930ceaccbb9307a74004cc94bfbdfcbf51ee5ab0b62e4cbef.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e7365Not Before16/12/2014, 09:43Not After16/12/2015, 09:43SubjectCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e7365c4:05:04:2c:e7:92:99:25:8d:6d:83:14:83:42:3f:e0:0c:91:36:f0Signer
Actual PE Digestc4:05:04:2c:e7:92:99:25:8d:6d:83:14:83:42:3f:e0:0c:91:36:f0Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e736524/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ