Static task
static1
Behavioral task
behavioral1
Sample
LeoneDumper.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
LeoneDumper.exe
Resource
win10v2004-20230621-en
General
-
Target
LeoneDumper.exe
-
Size
10KB
-
MD5
e7ffcce8886e1ed7e771a5ee8c9cd04c
-
SHA1
ab0bec4891ff0fb389f381fc656efe52691bf751
-
SHA256
55cdf99bb2b701edbcaada40ccf79335f71d8d1934d29c768a54ff17838605df
-
SHA512
ac4995081a483d45117915b8e1d294a5f424fc9fba5ffc1cf950622d3a400892b548d6f55dca49692d79acbd0efe4f86b8fe230f1412e098e03ef4fcdea68734
-
SSDEEP
192:HL1GPc+DNfUfhSfzwbbhPg1/EfX790Os0O+dS/c0ObyGf:HhGhDNsfAzwbbhY1sfX7COFO/VOby4
Malware Config
Signatures
Files
-
LeoneDumper.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
78:f5:ce:fd:96:c1:18:ab:44:17:d7:db:32:54:ef:33Certificate
IssuerCN=DESKTOP-03SVTA8\\stkanNot Before30/06/2023, 23:42Not After30/06/2024, 05:42SubjectCN=DESKTOP-03SVTA8\\stkan36:26:a9:28:d4:5c:e7:ad:cf:d2:59:9d:de:f3:73:8d:88:23:ff:6a:78:db:f2:7a:42:a5:d2:d7:32:17:06:e9Signer
Actual PE Digest36:26:a9:28:d4:5c:e7:ad:cf:d2:59:9d:de:f3:73:8d:88:23:ff:6a:78:db:f2:7a:42:a5:d2:d7:32:17:06:e9Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ