Static task
static1
Behavioral task
behavioral1
Sample
af548a30321fa1edaa18190a50bce8925ba4d0d7c8713627cddead3c646b6564.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af548a30321fa1edaa18190a50bce8925ba4d0d7c8713627cddead3c646b6564.exe
Resource
win10v2004-20220812-en
General
-
Target
af548a30321fa1edaa18190a50bce8925ba4d0d7c8713627cddead3c646b6564
-
Size
60KB
-
MD5
0d6e340a2bd8f5089ed2aa9a49f16e6a
-
SHA1
915ce96a75f4dd014e36f06dedbbe5ff443c6e25
-
SHA256
af548a30321fa1edaa18190a50bce8925ba4d0d7c8713627cddead3c646b6564
-
SHA512
3970dc7b657dcdae5962bfa5779e5f7dfbe46222236e612a31cd33337fc4f17434c949c23dca98d22459ae76e85aba99c324988f8f4372a1f9902f66d401c924
-
SSDEEP
1536:yVqDp/3AHvxMqhkRo35DFn0yIgDTBWC4Pl:yVS/3AHaqcaI6TIC4d
Malware Config
Signatures
Files
-
af548a30321fa1edaa18190a50bce8925ba4d0d7c8713627cddead3c646b6564.exe windows x64
Code Sign
61:eb:51:85:86:d5:d0:88:45:31:d7:fb:c0:31:6b:69Certificate
IssuerCN=TaleWorlds EntertainmentNot Before24/05/2018, 20:55Not After31/12/2039, 23:59SubjectCN=TaleWorlds Entertainment03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
73:2e:ca:61:50:9b:8c:28:98:9c:ea:38:0b:35:54:8a:4b:1b:77:15Signer
Actual PE Digest73:2e:ca:61:50:9b:8c:28:98:9c:ea:38:0b:35:54:8a:4b:1b:77:15Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=TaleWorlds Entertainment20/04/2020, 17:58 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ