Static task
static1
Behavioral task
behavioral1
Sample
0a4eb10a5d2e565b30c9078dbf004ae4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a4eb10a5d2e565b30c9078dbf004ae4.exe
Resource
win10v2004-20231222-en
General
-
Target
0a4eb10a5d2e565b30c9078dbf004ae4
-
Size
12KB
-
MD5
0a4eb10a5d2e565b30c9078dbf004ae4
-
SHA1
28ba1b057418b970f47e81ae65ea1272cc87e196
-
SHA256
7cc2d3c04491ed37866345e49768f057e866e1cb13e79ded569e2c96d20c6434
-
SHA512
2e1b372c38428923568cbc9df8906b325ae06978cd49a93ebb21356cafc4bf4306155689974e58a08c95bc6864700532a08a6312cadcdc6b09f5f8b8037186f4
-
SSDEEP
192:uMJbE3kQ5mtpnbLumPmJaclwfuzYLmb+XE53aa:tSQznbLumPGV2fu7biEtaa
Malware Config
Signatures
Files
-
0a4eb10a5d2e565b30c9078dbf004ae4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
90:f9:aa:26:1b:d0:1a:f3Certificate
IssuerCN=NVIDIA GameStream ServerNot Before07/02/2021, 15:55Not After07/02/2041, 15:55SubjectCN=NVIDIA GameStream Server47:17:d8:fc:7c:31:3b:e5:04:2b:e7:c4:ee:6f:d3:4b:8f:c2:d7:4b:06:56:64:6d:23:ed:62:57:90:9c:e9:11Signer
Actual PE Digest47:17:d8:fc:7c:31:3b:e5:04:2b:e7:c4:ee:6f:d3:4b:8f:c2:d7:4b:06:56:64:6d:23:ed:62:57:90:9c:e9:11Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ