Static task
static1
Behavioral task
behavioral1
Sample
87fcdd90c3eb5b70a50541a700626c1652878074b607645aa1efbd75d6c1990f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87fcdd90c3eb5b70a50541a700626c1652878074b607645aa1efbd75d6c1990f.exe
Resource
win10v2004-20221111-en
General
-
Target
87fcdd90c3eb5b70a50541a700626c1652878074b607645aa1efbd75d6c1990f
-
Size
739KB
-
MD5
d03558509a1ac5983b22b7f0f430d718
-
SHA1
15703abbced223d391df2ff078ba9a117483b094
-
SHA256
87fcdd90c3eb5b70a50541a700626c1652878074b607645aa1efbd75d6c1990f
-
SHA512
eaf05568a4c53cf0c4bf14f1fe99a3a0b4047100cc394393d5970621cac1461ffc8ecd594f57d8942d2dfafbb89753b1c5a66a6dd6780d998eadbcf421b6b4dd
-
SSDEEP
12288:6unrLPvQQ8PPmq5rhC70L9xf67uw5DJmzEvP48r49b3G5huhuM2Myn4GH:6Y33zUm+NBY7T5UIvP4oaT2MynB
Malware Config
Signatures
Files
-
87fcdd90c3eb5b70a50541a700626c1652878074b607645aa1efbd75d6c1990f.exe windows x86
Code Sign
64:42:9c:c3:8d:4f:4b:7b:be:f7:2e:24:0d:3f:35:45Certificate
IssuerCN=WebMoney TransferNot Before31/12/1999, 21:00Not After02/02/2012, 21:00SubjectCN=WebMoney Transfer59:4c:e0:f3:51:c6:2f:90:56:2e:b8:c7:d7:cc:f9:15:98:46:be:d1Signer
Actual PE Digest59:4c:e0:f3:51:c6:2f:90:56:2e:b8:c7:d7:cc:f9:15:98:46:be:d1Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=WebMoney Transfer01/12/2022, 14:35 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 521KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ