Static task
static1
Behavioral task
behavioral1
Sample
eeaf0fdcac615a638c4705dc75c0ff1c4cb7098effc96f219f284bc732c1be0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eeaf0fdcac615a638c4705dc75c0ff1c4cb7098effc96f219f284bc732c1be0a.exe
Resource
win10v2004-20221111-en
General
-
Target
eeaf0fdcac615a638c4705dc75c0ff1c4cb7098effc96f219f284bc732c1be0a
-
Size
844KB
-
MD5
99a81ca242ea4f405c12b98ab2ef493d
-
SHA1
a3723ebd48b2090f051917a44946d400707329cb
-
SHA256
eeaf0fdcac615a638c4705dc75c0ff1c4cb7098effc96f219f284bc732c1be0a
-
SHA512
bc60c89f203bf1700954b80d26c712ed595ee8e490fb75ad539c28096ceca1a22dec7a15285ac5f32015000bad16e07f4306cf9a66b0fdf25078555617a7a9cb
-
SSDEEP
12288:YEEW5GvXtsGDvLafnh8hBhE7Q5Wmt0xFqlPUaRWxZimX:YlECtXL2yhBMC4x087X
Malware Config
Signatures
Files
-
eeaf0fdcac615a638c4705dc75c0ff1c4cb7098effc96f219f284bc732c1be0a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e7365Not Before16-12-2014 09:43Not After16-12-2015 09:43SubjectCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e7365bc:47:6e:ca:8b:52:ad:c0:23:ec:c0:6e:ee:63:4b:7f:dc:a6:e2:d3Signer
Actual PE Digestbc:47:6e:ca:8b:52:ad:c0:23:ec:c0:6e:ee:63:4b:7f:dc:a6:e2:d3Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e736524-11-2022 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 705KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ