Static task
static1
Behavioral task
behavioral1
Sample
01f7a1138eef4f46f15f2561ea0ac919915fe27ce02c42df8dd081accc3a2585.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01f7a1138eef4f46f15f2561ea0ac919915fe27ce02c42df8dd081accc3a2585.exe
Resource
win10v2004-20220812-en
General
-
Target
01f7a1138eef4f46f15f2561ea0ac919915fe27ce02c42df8dd081accc3a2585
-
Size
519KB
-
MD5
803c854560e7cde48ff802fa17e7bbd3
-
SHA1
4e810ea666bddd83395225f7efcd39cb7de6e5b2
-
SHA256
01f7a1138eef4f46f15f2561ea0ac919915fe27ce02c42df8dd081accc3a2585
-
SHA512
66a174653bc1d93cd96c7b68373c6e08b70a7b0b43d3c7adce86ff2e571b35c7afc8e868193a9fde55494d51b9b83b6a673c565d8c57dfa429328957621a5424
-
SSDEEP
12288:58fqMmWLZaCSIvbXV2ct+VPEf2VU8wq65NWoR:585mEZU6
Malware Config
Signatures
Files
-
01f7a1138eef4f46f15f2561ea0ac919915fe27ce02c42df8dd081accc3a2585.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6dNot Before28-05-2015 16:52Not After27-05-2016 16:52SubjectCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6d7a:18:11:f4:67:99:00:fc:eb:55:3f:c8:36:0f:54:e9:18:ea:f7:f7Signer
Actual PE Digest7a:18:11:f4:67:99:00:fc:eb:55:3f:c8:36:0f:54:e9:18:ea:f7:f7Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.MonDo444.com,OU=Marketing,O=MonDo.com,L=MonDo LLC,ST=MonDo LLC,C=us,1.2.840.113549.1.9.1=#0c14636f6e74616374404d6f6e446f3434342e636f6d24-11-2022 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ