Static task
static1
Behavioral task
behavioral1
Sample
ad78e7c9de110b408d53d5df533d48aab891f3c821a8f4ea37b79789c9e03ff8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad78e7c9de110b408d53d5df533d48aab891f3c821a8f4ea37b79789c9e03ff8.dll
Resource
win10v2004-20220901-en
General
-
Target
ad78e7c9de110b408d53d5df533d48aab891f3c821a8f4ea37b79789c9e03ff8
-
Size
157KB
-
MD5
3c52daf4d7ed66cbf1728d1e9d51bcac
-
SHA1
16eb08d8ff73fa2759fc85e721fa1d62a9cd31a2
-
SHA256
ad78e7c9de110b408d53d5df533d48aab891f3c821a8f4ea37b79789c9e03ff8
-
SHA512
db2ad91d8634a6b5d4f19ce103b147b874e75b9308146af4bf780ad79954d935231f1814022b67aa027d6f70f18b59065e8ef0ffee42ae143734b2ac96ac1278
-
SSDEEP
1536:N33KMZuF9nt28VSxz23IjsJ1rD6jEvF/ZrQKvCh+CUWmo+2V+Kr0T0G+:spPt28MaoKgAPr1vg+Bst+KoTy
Malware Config
Signatures
Files
-
ad78e7c9de110b408d53d5df533d48aab891f3c821a8f4ea37b79789c9e03ff8.dll windows x86
Code Sign
18:dd:7b:ec:72:e9:42:75:b7:a7:68:f2:c2:5e:3d:e2Certificate
IssuerCN=Crypter,1.2.840.113549.1.9.1=#0c125061636b657240666f786d61696c2e636f6d,0.0=#130743727970746572Not Before31/12/2007, 16:00Not After31/12/2107, 16:00SubjectCN=Crypter,1.2.840.113549.1.9.1=#0c125061636b657240666f786d61696c2e636f6d,0.0=#1307437279707465721d:b1:62:0e:c0:f7:d0:4a:44:2d:14:c1:de:8f:3d:9b:0f:b0:80:1bSigner
Actual PE Digest1d:b1:62:0e:c0:f7:d0:4a:44:2d:14:c1:de:8f:3d:9b:0f:b0:80:1bDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Crypter,1.2.840.113549.1.9.1=#0c125061636b657240666f786d61696c2e636f6d,0.0=#13074372797074657201/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
WSPStartup
Sections
*I6ig1Ng Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
=>!;`4#J Size: 69KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b[SqgT0v Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
V_w'&`NA Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ