Static task
static1
General
-
Target
Namshi Shopping Checker XEdge.rar
-
Size
118KB
-
MD5
f049e2bbd564418e6904362990c4d7d0
-
SHA1
e2be99b98f5d4ec5e1a4f64b33bb6f69af2feb93
-
SHA256
a2bdad948396af2bf36d52c5d47d8fbe7a24ebe3dd4b3bd92ed4654e3151d5ee
-
SHA512
274a9ad9a32c331bf5f2307228c4be29a82a3ca2daff90cdc01409ac71039602f1d802463932297b23d448317f2b73abc32c66473c453245e86a597e64e631dc
-
SSDEEP
1536:H9HG3crxo1GBUx2pG6LO8sRvk0ONS3Z4p61W0AiBx9vCTMIlL033Q0bQCrQgG7e2:H9HCcrxo1G5JLfsRvBvJ0spTFpQOKy2
Malware Config
Signatures
Files
-
Namshi Shopping Checker XEdge.rar.rar
-
Namshi Shopping Checker XEdge/Leaf.xNet.cdf-ms
-
Namshi Shopping Checker XEdge/Leaf.xNet.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Namshi Shopping Checker XEdge/Leaf.xNet.manifest
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.cdf-ms
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
5d:0c:08:74:c7:dc:3f:af:47:65:2a:b6:86:9c:36:efCertificate
IssuerCN=Emir\\Emir YasinNot Before28/07/2022, 13:01Not After28/07/2023, 19:01SubjectCN=Emir\\Emir Yasin6a:b5:7e:0d:03:09:c5:59:05:ce:07:56:5e:9b:c7:82:91:ca:71:90:0e:09:65:99:2b:0a:e5:b8:47:a4:f2:0aSigner
Actual PE Digest6a:b5:7e:0d:03:09:c5:59:05:ce:07:56:5e:9b:c7:82:91:ca:71:90:0e:09:65:99:2b:0a:e5:b8:47:a4:f2:0aDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Emir\\Emir Yasin01/12/2022, 14:34 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.exe.cdf-ms
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.exe.config
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.exe.manifest
-
Namshi Shopping Checker XEdge/Namshi-Checker-By-XEdge.manifest
-
Namshi Shopping Checker XEdge/indir.ico