Static task
static1
Behavioral task
behavioral1
Sample
51e8ca453278ec50b79cb8cbe8c0c926929803f4d521248729fe5f94daacca61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51e8ca453278ec50b79cb8cbe8c0c926929803f4d521248729fe5f94daacca61.exe
Resource
win10v2004-20221111-en
General
-
Target
51e8ca453278ec50b79cb8cbe8c0c926929803f4d521248729fe5f94daacca61
-
Size
744KB
-
MD5
9b50b39fafed23bc99a5ff5134916dd2
-
SHA1
d81554652bdb21264a5238b421f97e337ebdf855
-
SHA256
51e8ca453278ec50b79cb8cbe8c0c926929803f4d521248729fe5f94daacca61
-
SHA512
90b0c3ffedf9ad3b6e57a3aa85600d9b59c4043d1cc16adab0f7891bac73c338742fd0ff733accb779900826ec02144b8260117fe1008580f3ce632951546e0c
-
SSDEEP
12288:GO59tPc3tn79bd0Lc3i4BFbtN14hj56FqWUyWtTXfaXAw5WSvY3kkzsNRRK:H1Md9bCPw5N14h4NRRK
Malware Config
Signatures
Files
-
51e8ca453278ec50b79cb8cbe8c0c926929803f4d521248729fe5f94daacca61.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6dNot Before28/05/2015, 16:52Not After27/05/2016, 16:52SubjectCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6da2:f2:ae:0a:54:f0:23:bb:bf:ae:22:ca:82:67:5d:0b:eb:30:04:9cSigner
Actual PE Digesta2:f2:ae:0a:54:f0:23:bb:bf:ae:22:ca:82:67:5d:0b:eb:30:04:9cDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6d24/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 533KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ