Static task
static1
Behavioral task
behavioral1
Sample
e3eddfce0631c4d2fda480070367f340158ff7e4abff5b68e32d8cc08e4d0fd0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3eddfce0631c4d2fda480070367f340158ff7e4abff5b68e32d8cc08e4d0fd0.exe
Resource
win10v2004-20221111-en
General
-
Target
e3eddfce0631c4d2fda480070367f340158ff7e4abff5b68e32d8cc08e4d0fd0
-
Size
631KB
-
MD5
3a253d86584256642ede02108af9f77c
-
SHA1
146ad4269f6a1995d0122c453efa93d08e8e9d78
-
SHA256
e3eddfce0631c4d2fda480070367f340158ff7e4abff5b68e32d8cc08e4d0fd0
-
SHA512
cb1514f591047d86103df39cfcaf73e6dc57e707d4de7f06457919ca9b735d9cbada5fc9bf2af6baa7cefd87524c473720f908b5cc6b8380f87019f4814d7ebb
-
SSDEEP
12288:q6A3LIrdOT0IUEOEywPo8ZnOVP/yf1hEXYu42o5PUxYM:qB7I8kEmilZwCz2y8xYM
Malware Config
Signatures
Files
-
e3eddfce0631c4d2fda480070367f340158ff7e4abff5b68e32d8cc08e4d0fd0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=BrendBandCert Security,OU=BrendBandCert Security,O=BrendBandCert,L=Stockholm,ST=Stockholm Province,C=se,1.2.840.113549.1.9.1=#0c15696e666f406272656e6462616e64636572742e7365Not Before02-12-2014 12:21Not After02-12-2015 12:21SubjectCN=BrendBandCert Security,OU=BrendBandCert Security,O=BrendBandCert,L=Stockholm,ST=Stockholm Province,C=se,1.2.840.113549.1.9.1=#0c15696e666f406272656e6462616e64636572742e73651e:2f:1e:bf:9a:e6:5a:de:72:f2:e4:df:80:f4:e4:c6:ae:de:f2:fcSigner
Actual PE Digest1e:2f:1e:bf:9a:e6:5a:de:72:f2:e4:df:80:f4:e4:c6:ae:de:f2:fcDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=BrendBandCert Security,OU=BrendBandCert Security,O=BrendBandCert,L=Stockholm,ST=Stockholm Province,C=se,1.2.840.113549.1.9.1=#0c15696e666f406272656e6462616e64636572742e736524-11-2022 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ