Static task
static1
Behavioral task
behavioral1
Sample
95a4154d6e8aef8017bd79d1f3e7c112800dedde69a46d332f369a2c605a021a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95a4154d6e8aef8017bd79d1f3e7c112800dedde69a46d332f369a2c605a021a.exe
Resource
win10v2004-20221111-en
General
-
Target
95a4154d6e8aef8017bd79d1f3e7c112800dedde69a46d332f369a2c605a021a
-
Size
920KB
-
MD5
ffe71f6c7e4975a20ba35400b7551396
-
SHA1
c1dd042428f98bcca4a751843abef75f203bb928
-
SHA256
95a4154d6e8aef8017bd79d1f3e7c112800dedde69a46d332f369a2c605a021a
-
SHA512
94029496c194039ed5cabb644136e5944ec5a573de17af0ce2d352a4b1bd8f4ebb865af9fa1a819802e0896586f7f0cb5d08412cf76d288f420675d6d7ea8a36
-
SSDEEP
24576:8waLIfWJY+P4IHmeIRJeYHEOyVF7Y7fEYWBHSvGGcJ:8pcfd+DGeOeBOyXCflXOF
Malware Config
Signatures
Files
-
95a4154d6e8aef8017bd79d1f3e7c112800dedde69a46d332f369a2c605a021a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6dNot Before02-05-2015 16:26Not After01-05-2016 16:26SubjectCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6d5f:8d:74:f9:02:9c:c6:56:14:14:89:ae:7e:1c:5d:f9:00:3c:d9:a2Signer
Actual PE Digest5f:8d:74:f9:02:9c:c6:56:14:14:89:ae:7e:1c:5d:f9:00:3c:d9:a2Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.cacert.cake,OU=Samoa,O=Samoa,L=Samoa,ST=American,C=as,1.2.840.113549.1.9.1=#0c076e40612e636f6d24-11-2022 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ