Static task
static1
Behavioral task
behavioral1
Sample
a87607a29eb9d9c2dadee669d77747f2fc3940df1bb0dda101361a6318419c96.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a87607a29eb9d9c2dadee669d77747f2fc3940df1bb0dda101361a6318419c96.exe
Resource
win10v2004-20221111-en
General
-
Target
a87607a29eb9d9c2dadee669d77747f2fc3940df1bb0dda101361a6318419c96
-
Size
819KB
-
MD5
bbac0d63b9f4bd68335830d1d9dd18dd
-
SHA1
b205aabb3c0b259604d62f608f86ff718cf44047
-
SHA256
a87607a29eb9d9c2dadee669d77747f2fc3940df1bb0dda101361a6318419c96
-
SHA512
b0ae0f638595c9a1c08f5c29f3a3ef2639d3b767e83a314653b9fa91da1b5b15873d8ff5a4d17445ef9832bb84f6446256e6957c150750d4c99f0d083c072f66
-
SSDEEP
12288:lW12LwJ7m3PQqABEoJVaJixrvMIRcfkCV7bLKFwXu9FO+f/5CFFMbr:I1qwJ7m/AuoJwJenRcfzJKS+mM5QFM3
Malware Config
Signatures
Files
-
a87607a29eb9d9c2dadee669d77747f2fc3940df1bb0dda101361a6318419c96.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
6c:7c:17:23:38:1a:15:a4:41:61:85:1a:89:4b:f5:45Certificate
IssuerCN=SmartFTP ClientNot Before02/01/2014, 12:56Not After02/01/2114, 12:56SubjectCN=SmartFTP Client8c:3d:cc:15:70:d1:e8:c4:18:43:d8:7f:11:af:14:b6:98:87:49:7cSigner
Actual PE Digest8c:3d:cc:15:70:d1:e8:c4:18:43:d8:7f:11:af:14:b6:98:87:49:7cDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=SmartFTP Client24/11/2022, 14:55 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 717KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ