Static task
static1
Behavioral task
behavioral1
Sample
c60fff09ebc511b9b56c43fabc53aa8d522b64b7d38e54dc1aa5b132d9821c05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c60fff09ebc511b9b56c43fabc53aa8d522b64b7d38e54dc1aa5b132d9821c05.exe
Resource
win10v2004-20220812-en
General
-
Target
c60fff09ebc511b9b56c43fabc53aa8d522b64b7d38e54dc1aa5b132d9821c05
-
Size
933KB
-
MD5
e3ef8905f77f71474eb0ae494416e7e0
-
SHA1
0fce956cb05d0c636e4a9cde041ed5daede3f062
-
SHA256
c60fff09ebc511b9b56c43fabc53aa8d522b64b7d38e54dc1aa5b132d9821c05
-
SHA512
4a597e5654db7106be4d3f85a5084081d0e86b76a65583987ee71b163b94b44e985915f0ec6b0e12618474ebb7e925346376bfe4b10756bd9a227b7c5978f213
-
SSDEEP
24576:/OtCvCxPKfo/boRrn0nWmCXLeBa2cwszMRMYHvc:AXTYn0n194
Malware Config
Signatures
Files
-
c60fff09ebc511b9b56c43fabc53aa8d522b64b7d38e54dc1aa5b132d9821c05.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=Hotelish.com,OU=Marketing,O=Hotelish.com,L=Hotel,ST=Hotel,C=rw,1.2.840.113549.1.9.1=#0c14636f6e7461637440486f74656c6973682e636f6dNot Before23/05/2015, 18:07Not After22/05/2016, 18:07SubjectCN=Hotelish.com,OU=Marketing,O=Hotelish.com,L=Hotel,ST=Hotel,C=rw,1.2.840.113549.1.9.1=#0c14636f6e7461637440486f74656c6973682e636f6df0:ad:64:d4:a7:f6:6b:b3:9b:32:22:cf:87:47:98:3f:4e:7b:13:01Signer
Actual PE Digestf0:ad:64:d4:a7:f6:6b:b3:9b:32:22:cf:87:47:98:3f:4e:7b:13:01Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Hotelish.com,OU=Marketing,O=Hotelish.com,L=Hotel,ST=Hotel,C=rw,1.2.840.113549.1.9.1=#0c14636f6e7461637440486f74656c6973682e636f6d24/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 842KB - Virtual size: 841KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ