Static task
static1
Behavioral task
behavioral1
Sample
04dab279f1ae85685bb1a9c2d6422fec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04dab279f1ae85685bb1a9c2d6422fec.exe
Resource
win10v2004-20231215-en
General
-
Target
04dab279f1ae85685bb1a9c2d6422fec
-
Size
1.3MB
-
MD5
04dab279f1ae85685bb1a9c2d6422fec
-
SHA1
8aacb13aafb4fb43f69d2a205eacc3d55b2e248a
-
SHA256
24a8611d9d9d185b48fd71c4df4713c234179c341c547693d66d3012499ab5fc
-
SHA512
ffb5b99f383f43e42f7ca88e3a22b9150843c4592a6378a818b402cfaf9ece0f97d39ad44bafc266fa94a4786d525385527c1d6f0f2006ec6811919058a8b63c
-
SSDEEP
12288:b6DBqA7hGn7B5/G+GY7MWKvMekD2mn0W56EwlxfgBu/fIdVohrjVjXydxrF3b6gc:2v7o6+JMq8+lwlxfM5dVKFXkoTe6
Malware Config
Signatures
Files
-
04dab279f1ae85685bb1a9c2d6422fec.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.dllhostin32.com,OU=Marketing,O=Mobilefish.com,L=Cali,ST=Orange,C=us,1.2.840.113549.1.9.1=#0c17636f6e7461637440646c6c686f7374696e33322e636f6dNot Before02-07-2015 05:07Not After01-07-2016 05:07SubjectCN=www.dllhostin32.com,OU=Marketing,O=Mobilefish.com,L=Cali,ST=Orange,C=us,1.2.840.113549.1.9.1=#0c17636f6e7461637440646c6c686f7374696e33322e636f6d0f:18:3a:00:b9:ac:e2:0c:1d:13:f1:ad:01:b2:1c:82:d1:f1:b5:4dSigner
Actual PE Digest0f:18:3a:00:b9:ac:e2:0c:1d:13:f1:ad:01:b2:1c:82:d1:f1:b5:4dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 949KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ