Static task
static1
Behavioral task
behavioral1
Sample
e335498eeee65e6854635578d2915597cf70b1bd720b10e972f7ba8c89588a63.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e335498eeee65e6854635578d2915597cf70b1bd720b10e972f7ba8c89588a63.exe
Resource
win10v2004-20221111-en
General
-
Target
e335498eeee65e6854635578d2915597cf70b1bd720b10e972f7ba8c89588a63
-
Size
37KB
-
MD5
b86e43d8ef7b3620bf07b86f329e2a41
-
SHA1
63c34a53fe6dea4a539acd1ebd2c31824ae353d4
-
SHA256
e335498eeee65e6854635578d2915597cf70b1bd720b10e972f7ba8c89588a63
-
SHA512
30bab58c6e5c1b9dd89245b4a6d79a5b975bc96a244e5e6ca20dfd0022804f2afc08d92db0234fafd90c6af80e692524e503c8f3dac7a710d323f47213cf1254
-
SSDEEP
384:9EPOQzD68POHbADC8V7RFYOx7wT1a9ZSIFh580f7xJ+BlfLTjXvA9bdu6eTDYvsU:9Q0apRzUxRI/JNc/HjX4RduZDwd2Ufx
Malware Config
Signatures
Files
-
e335498eeee65e6854635578d2915597cf70b1bd720b10e972f7ba8c89588a63.exe windows x86
b667bd42f00cce8f5d346c5fd7121db5
Code Sign
45:f8:9c:de:e5:51:13:7f:b1:0a:1d:0c:57:fc:3e:adCertificate
IssuerCN=AawiawewoaaqaaarNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Aawiawewoaaqaaarc6:c9:4c:0b:37:6c:33:24:7c:63:73:fa:41:e6:b2:b7:e2:f0:92:63Signer
Actual PE Digestc6:c9:4c:0b:37:6c:33:24:7c:63:73:fa:41:e6:b2:b7:e2:f0:92:63Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Aawiawewoaaqaaar01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
kernel32
WaitForSingleObject
CreateThread
ExitProcess
GetModuleHandleA
GetProcAddress
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ