Static task
static1
Behavioral task
behavioral1
Sample
3427e2e07ffb0f5a33c1e9f29554a988c95be9caaba6ff7b6201f44792ef280c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3427e2e07ffb0f5a33c1e9f29554a988c95be9caaba6ff7b6201f44792ef280c.exe
Resource
win10v2004-20220901-en
General
-
Target
3427e2e07ffb0f5a33c1e9f29554a988c95be9caaba6ff7b6201f44792ef280c
-
Size
563KB
-
MD5
c9480b9c113426808c2a92e1bfac3bd2
-
SHA1
d6fb6ec52ac1ad9b3c2e844b8d89120a7acf92ca
-
SHA256
3427e2e07ffb0f5a33c1e9f29554a988c95be9caaba6ff7b6201f44792ef280c
-
SHA512
975dc8d1c8e97ad2b7f4394cd0035a1707ba5d7bbef3940035d7d50468c0319250cbea2b9a7f81106e9fd9f95af72584f8963374f5098b5fe13c635ad3dbc94a
-
SSDEEP
12288:pdzzOlArmA+aMGBch7rkmC/LLHcQqNTVe7IMi7xiBj6sDODGr:jzzO2bMGqtrk7aJVe7kUp6sDr
Malware Config
Signatures
Files
-
3427e2e07ffb0f5a33c1e9f29554a988c95be9caaba6ff7b6201f44792ef280c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e7365Not Before16/12/2014, 09:43Not After16/12/2015, 09:43SubjectCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e736586:63:53:38:ae:22:0d:48:c1:ed:ac:5d:f9:97:28:9d:f3:43:d4:1eSigner
Actual PE Digest86:63:53:38:ae:22:0d:48:c1:ed:ac:5d:f9:97:28:9d:f3:43:d4:1eDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=SvenskCert Limited.,OU=SvenskCert Ltd.,O=SvenskCert Ltd.,L=Stockholm Central District,ST=Stockholm,C=se,1.2.840.113549.1.9.1=#0c1263657274407376656e736b636572742e736524/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 425KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ