Static task
static1
Behavioral task
behavioral1
Sample
LeoneDumper.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
LeoneDumper.exe
Resource
win10v2004-20230621-en
General
-
Target
LeoneDumper.exe
-
Size
238KB
-
MD5
997ff6e544f760c4b16630614f31f950
-
SHA1
436ec493eb37200498099e451325db9b78e15856
-
SHA256
95bbdf4f1ebae515d90139c7690e60e7abd94170207c7342d6e502ebad2f6b53
-
SHA512
b96e91011d90c19196493bd6585b4354e34edfcc37417e419c79cab3ae0ecb757e0ad70b64dc282ff60bebb251144f984e66689ad98b564ddd76ddbfda1bc272
-
SSDEEP
6144:FqnKyjWo7gB8eOCJG3FGJljXdQprzvEXaAMw0YYaZB6gkipk3mmw0OKggF:FqKsWR8FCw3wjXdQpv6aAMpQZtxTSge
Malware Config
Signatures
Files
-
LeoneDumper.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
78:f5:ce:fd:96:c1:18:ab:44:17:d7:db:32:54:ef:33Certificate
IssuerCN=DESKTOP-03SVTA8\\stkanNot Before30-06-2023 23:42Not After30-06-2024 05:42SubjectCN=DESKTOP-03SVTA8\\stkan26:83:5f:49:48:87:7c:94:50:e6:0e:c8:d6:2e:15:ee:f7:32:56:d4:67:00:77:c5:a8:a2:c8:28:83:cc:40:f5Signer
Actual PE Digest26:83:5f:49:48:87:7c:94:50:e6:0e:c8:d6:2e:15:ee:f7:32:56:d4:67:00:77:c5:a8:a2:c8:28:83:cc:40:f5Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ