Static task
static1
Behavioral task
behavioral1
Sample
59c39af0537b3bd9caaf38438207870762dc5fac8959b048e9faf1a49c0653c0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
59c39af0537b3bd9caaf38438207870762dc5fac8959b048e9faf1a49c0653c0.exe
Resource
win10v2004-20221111-en
General
-
Target
59c39af0537b3bd9caaf38438207870762dc5fac8959b048e9faf1a49c0653c0
-
Size
683KB
-
MD5
4648966b0be17d81438f02b91ed7411f
-
SHA1
7280dc5149fa35028489df199e069114d5c86232
-
SHA256
59c39af0537b3bd9caaf38438207870762dc5fac8959b048e9faf1a49c0653c0
-
SHA512
4318a01b20e66b08aafc6c2891a45113fcb63a42220d136050d98fd74c6e6ee392d7642846af5f2e937959249a7c41bfbdb3d0103559d2d74ee6e7c62249462a
-
SSDEEP
12288:jPJH1QddyYP4l3w8acVoGF7Y7fEYWBSeS5jKHPwFh5cmFUyWIvQRobXzFMuMnXU+:jP6P2xBF7Y7fEYWBHSPzN8k7q
Malware Config
Signatures
Files
-
59c39af0537b3bd9caaf38438207870762dc5fac8959b048e9faf1a49c0653c0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6dNot Before02/05/2015, 16:26Not After01/05/2016, 16:26SubjectCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6da1:f1:f9:23:9b:47:e6:2c:44:b1:4d:9f:66:f1:a5:73:98:a4:24:f0Signer
Actual PE Digesta1:f1:f9:23:9b:47:e6:2c:44:b1:4d:9f:66:f1:a5:73:98:a4:24:f0Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6d24/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ