Static task
static1
Behavioral task
behavioral1
Sample
dbfbacba1764729a307b7f52b8e41a64e2cb9e9fbb273b7e626c934f7a7cea57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbfbacba1764729a307b7f52b8e41a64e2cb9e9fbb273b7e626c934f7a7cea57.exe
Resource
win10v2004-20220812-en
General
-
Target
dbfbacba1764729a307b7f52b8e41a64e2cb9e9fbb273b7e626c934f7a7cea57
-
Size
287KB
-
MD5
2778ef10cfff8f687385c59917624180
-
SHA1
cf46b984297003c1092ddb04a043784a1a61c7ce
-
SHA256
dbfbacba1764729a307b7f52b8e41a64e2cb9e9fbb273b7e626c934f7a7cea57
-
SHA512
716d73a9422953b3aab2cc5259805f036134f27e25aa150259e9592b421bcd1c9e76b3be99d3cfa248a9f8df3bf3af01db79c29be50805112255439ba9ef253d
-
SSDEEP
6144:RmdLBmAjL1DPPDv/aoGgqsVZJOAOa2O+kRLEtUPlIY:oLmAjL1DPbv/DusrJw6+MLEtUSY
Malware Config
Signatures
Files
-
dbfbacba1764729a307b7f52b8e41a64e2cb9e9fbb273b7e626c934f7a7cea57.exe windows x86
Code Sign
01Certificate
IssuerO=Internet Widgits Pty Ltd,L=EW,ST=SA,C=FDNot Before28-10-2012 20:28Not After28-10-2014 20:28SubjectO=Internet Widgits Pty Ltd,ST=FS,C=GFc3:4d:99:04:b3:30:48:3b:6d:b3:fe:10:02:7d:7a:f3:96:37:47:2dSigner
Actual PE Digestc3:4d:99:04:b3:30:48:3b:6d:b3:fe:10:02:7d:7a:f3:96:37:47:2dDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateO=Internet Widgits Pty Ltd,ST=FS,C=GF01-12-2022 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ