Static task
static1
Behavioral task
behavioral1
Sample
afa2e8be96ca86a8b12dec4f6fc12958867219abe09966cd6b39000247ede792.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afa2e8be96ca86a8b12dec4f6fc12958867219abe09966cd6b39000247ede792.exe
Resource
win10v2004-20220901-en
General
-
Target
afa2e8be96ca86a8b12dec4f6fc12958867219abe09966cd6b39000247ede792
-
Size
274KB
-
MD5
5d3f99c43bdc1205b59da497b27cf629
-
SHA1
d87a58e13ce96428065b4ea65b15671a97d1ad4f
-
SHA256
afa2e8be96ca86a8b12dec4f6fc12958867219abe09966cd6b39000247ede792
-
SHA512
26a6d247f098a3e30995a44c786427d64466b0e6dbdb9f8875d1961a4d8f48fdb812ea838ee520ac7bcb7afc81c2a483ae2a6d7485f36e983f9a889ec9b68011
-
SSDEEP
6144:mj2NA2rgIZseLlJfOMBfcuJwam6ZqRrOuic4pe:+b2rgIZx9OyLWkqR/4p
Malware Config
Signatures
Files
-
afa2e8be96ca86a8b12dec4f6fc12958867219abe09966cd6b39000247ede792.exe windows x86
Code Sign
01Certificate
IssuerOU=VAD,O=VAD,L=ASD,ST=AF,C=GFNot Before05-11-2014 00:45Not After04-11-2016 00:45SubjectOU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA91:60:7e:8f:02:9b:0b:4c:e3:fe:01:36:6a:d1:44:43:99:78:de:bfSigner
Actual PE Digest91:60:7e:8f:02:9b:0b:4c:e3:fe:01:36:6a:d1:44:43:99:78:de:bfDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateOU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA24-11-2022 14:54 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PPZZQFNS Size: 512B - Virtual size: 3KB
IMAGE_SCN_MEM_READ