Static task
static1
Behavioral task
behavioral1
Sample
935160071634608b2b4e599ed5e3582344c799df73d036da7c4bb5b61570c3be.exe
Resource
win7-20220901-en
General
-
Target
935160071634608b2b4e599ed5e3582344c799df73d036da7c4bb5b61570c3be
-
Size
496KB
-
MD5
a65b95247caa243e01b17ee65b04bcb2
-
SHA1
f7bdb843a14a3ea07439fa813c04473305b48f80
-
SHA256
935160071634608b2b4e599ed5e3582344c799df73d036da7c4bb5b61570c3be
-
SHA512
2188d3578cc78b56ab4f8127960ae0cc39b97559ce933f3493596c5a10f408dfbdd59e59161458ea900e3521ec4d2b2e357651f8a9cb77c9f3d24f5917532260
-
SSDEEP
12288:yTCBBIn6/3P1yOot9ZyhzBOUXpR618ISgm2Vp7ZqMd0QZh9uU:H9/3totPyY1PmCptD0QZh9uU
Malware Config
Signatures
Files
-
935160071634608b2b4e599ed5e3582344c799df73d036da7c4bb5b61570c3be.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
6c:7c:17:23:38:1a:15:a4:41:61:85:1a:89:4b:f5:45Certificate
IssuerCN=SmartFTP ClientNot Before02/01/2014, 12:56Not After02/01/2114, 12:56SubjectCN=SmartFTP Cliente0:75:15:db:39:a3:c9:ff:8a:ca:e2:3f:0d:c8:35:97:fd:d0:15:3dSigner
Actual PE Digeste0:75:15:db:39:a3:c9:ff:8a:ca:e2:3f:0d:c8:35:97:fd:d0:15:3dDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=SmartFTP Client24/11/2022, 14:55 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ