Static task
static1
Behavioral task
behavioral1
Sample
68568e8c6807745ceb898b996297d3a72bb3ed52e89872281127e13071f94dc4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68568e8c6807745ceb898b996297d3a72bb3ed52e89872281127e13071f94dc4.exe
Resource
win10v2004-20220901-en
General
-
Target
68568e8c6807745ceb898b996297d3a72bb3ed52e89872281127e13071f94dc4
-
Size
271KB
-
MD5
c17ded5c76e71ad24fdfb7f7864fec0f
-
SHA1
9ce63f1bf8067778053c8c02004196a6f728f85c
-
SHA256
68568e8c6807745ceb898b996297d3a72bb3ed52e89872281127e13071f94dc4
-
SHA512
2a5502136c04d23070e6bfeff8118567a6ddff9a2246eab900e29c09cb4b4e9770aac6c5ad0d1026c9bf1b76d6ed35abc65beb14e025889c1a62070b20b0c063
-
SSDEEP
6144:LCva4dcUHkJRFdgiYW3GsNQaM9X3ZzVoEtCwRtY61xEF8z+hCctlO:Wva5UQRFiiH3DzM9HZZorWtH1uF8z8CJ
Malware Config
Signatures
Files
-
68568e8c6807745ceb898b996297d3a72bb3ed52e89872281127e13071f94dc4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
2f:d9:13:0f:6a:cc:51:87:4f:2b:6c:49:be:05:e4:4dCertificate
IssuerCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}Not Before24/05/2014, 21:19Not After25/05/2015, 03:19SubjectCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}2c:50:e8:59:5c:fb:c2:eb:b1:ab:a4:b5:cc:ab:73:6a:16:d1:ff:cfSigner
Actual PE Digest2c:50:e8:59:5c:fb:c2:eb:b1:ab:a4:b5:cc:ab:73:6a:16:d1:ff:cfDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}24/11/2022, 14:54 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ