Static task
static1
Behavioral task
behavioral1
Sample
126e7ef1ff8a65383b0436fb10f4b053.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
126e7ef1ff8a65383b0436fb10f4b053.exe
Resource
win10v2004-20231215-en
General
-
Target
126e7ef1ff8a65383b0436fb10f4b053
-
Size
260KB
-
MD5
126e7ef1ff8a65383b0436fb10f4b053
-
SHA1
6acbdbfcc8b87d544c8167e2ae8f72a7aa7b0622
-
SHA256
6662a913979c27295c54dcf27abbe13d1822d477412bd2f9e7e84ae437cd2ff7
-
SHA512
bf680ab8a4038cefdddb726103cbdba5a6875a2e1391c143ddab0d8c5833ef0406f80c08f5c51b68451dbbed587845f7df63e2fe51e962540d4970508b011985
-
SSDEEP
6144:r9vx6F4YeF3Gp0NbdjMSkwb2if1L5kz91xSxCFYd:5vxNF3qWbdjMNwbn9y6sY
Malware Config
Signatures
Files
-
126e7ef1ff8a65383b0436fb10f4b053.exe windows:5 windows x86 arch:x86
e3033852a536f0fcc7ec9fbda0e25830
Code Sign
13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12/05/1997, 07:00Not After31/12/1999, 07:00SubjectOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Networkbd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60Certificate
IssuerOU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust NetworkNot Before12/05/1997, 07:00Not After31/12/1999, 07:00SubjectOU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet72:b5:13:47:ab:f8:11:d2:a4:1e:00:c0:4f:79:fe:8eCertificate
IssuerCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before13/01/1999, 07:00Not After01/02/2000, 07:00SubjectCN=Microsoft Windows 2000 Beta,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationExtended Key Usages
ExtKeyUsageCodeSigning
4f:ff:a6:23:54:b1:ee:2d:5b:e1:ff:3f:b0:86:01:72Certificate
IssuerCN=Microsoft Beta Root Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationNot Before11/01/1999, 07:00Not After31/12/2005, 07:00SubjectCN=Microsoft Beta PCA Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft CorporationSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
printf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
sprintf
scanf
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
atoi
_adjust_fdiv
__p__commode
kernel32
CreateFileA
DeviceIoControl
CloseHandle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�tl Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE