Static task
static1
Behavioral task
behavioral1
Sample
e7d4b810adde1f19eebbc5872d38373de434050a5330162da3b868e35ecee1e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e7d4b810adde1f19eebbc5872d38373de434050a5330162da3b868e35ecee1e0.exe
Resource
win10v2004-20220812-en
General
-
Target
e7d4b810adde1f19eebbc5872d38373de434050a5330162da3b868e35ecee1e0
-
Size
39KB
-
MD5
76c11003c00471a70c13ece407fad71f
-
SHA1
4047106af0014aa6f3bac833e698b0a1b799f007
-
SHA256
e7d4b810adde1f19eebbc5872d38373de434050a5330162da3b868e35ecee1e0
-
SHA512
c1dc7ad6ce3932f6335f35673e3fadee33f57ef148f91d9c4d02a75202531eb108e8b2a1a5dcb4eadfe8a774ca8a874d39cc72651c62f4f2b2b0531ec8be8733
-
SSDEEP
768:Ul9WJaEuZNOcJdz1oz6KY+IqAtAqj405YlN8U/qq:UHWJzCJdz1WYpjAq/YQU/B
Malware Config
Signatures
Files
-
e7d4b810adde1f19eebbc5872d38373de434050a5330162da3b868e35ecee1e0.exe windows x86
c62bff389a167cd1f6c64f40525b8d4d
Code Sign
4b:b3:1d:1a:26:6b:ac:68:bc:88:24:79:80:c1:43:d4Certificate
IssuerCN=RirowiaNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Rirowiab7:ad:2d:ee:bd:31:99:9d:9c:ba:13:62:8b:d7:3d:4c:d9:8b:89:24Signer
Actual PE Digestb7:ad:2d:ee:bd:31:99:9d:9c:ba:13:62:8b:d7:3d:4c:d9:8b:89:24Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Rirowia01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetTimer
LoadImageA
KillTimer
GetMessageA
DispatchMessageA
kernel32
ExitProcess
VirtualAlloc
LoadLibraryA
GetProcAddress
GetModuleHandleA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 338B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ