Behavioral task
behavioral1
Sample
b1feba1424a004380bb020b75b6f0295fe8567ce3862e17edff2953956d44f1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1feba1424a004380bb020b75b6f0295fe8567ce3862e17edff2953956d44f1e.exe
Resource
win10v2004-20220812-en
General
-
Target
b1feba1424a004380bb020b75b6f0295fe8567ce3862e17edff2953956d44f1e
-
Size
31KB
-
MD5
efc56a25a22a8f7a68316772d2a85f67
-
SHA1
3eaddd4b2488bd2c0ceb90af40d965b3ecd468bf
-
SHA256
b1feba1424a004380bb020b75b6f0295fe8567ce3862e17edff2953956d44f1e
-
SHA512
94e3331865054b0c87eecabd90cf97f602afc9fe38565102dd3cf437b4e342467aeaf04606e77fd707619e7e0b6674f56988b532e1dd91e6fd255075319a2305
-
SSDEEP
768:NaR+O2bfqP2vOIPvQ7tI9VoQ4i/SkcDIFQ/nbcuyD7UCekh:NRO2bflOInQBCrpDmnouy8Cem
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b1feba1424a004380bb020b75b6f0295fe8567ce3862e17edff2953956d44f1e.exe windows x86
Code Sign
32:25:fb:5a:95:d0:75:82:45:45:99:be:4e:85:fb:b1Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009 CANot Before17-10-2009 16:00Not After18-10-2012 16:00SubjectCN=Games Software Helper Tools23:35:a9:ef:3a:6f:3d:64:b1:cf:8d:1f:62:ad:bd:a0Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009 CANot Before30-09-1999 16:00Not After16-07-2036 16:00SubjectCN=VeriSign Class 3 Code Signing 2009 CA65:89:55:5a:5e:d4:e4:2b:fc:39:84:2b:c2:2b:4b:e7:be:b6:c3:71Signer
Actual PE Digest65:89:55:5a:5e:d4:e4:2b:fc:39:84:2b:c2:2b:4b:e7:be:b6:c3:71Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Games Software Helper Tools01-12-2022 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE