Static task
static1
Behavioral task
behavioral1
Sample
3dd205887844ad3df8c56c24a61eb3b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dd205887844ad3df8c56c24a61eb3b9.exe
Resource
win10v2004-20231215-en
General
-
Target
3dd205887844ad3df8c56c24a61eb3b9
-
Size
24KB
-
MD5
3dd205887844ad3df8c56c24a61eb3b9
-
SHA1
bde6c732ece5e23792cfa050d9ace4271256f171
-
SHA256
14778ad9ec501d5c3a11a98253875f97572c44612ebcde4a141042cb1f4aee63
-
SHA512
a5fa733e719f08bd0e0cb2b92d5776ce045f78e8468824e96286ab0232665f427207f91fc4140a3fe5912bb835e13467104d9d25eae25dc4264cb6fbdfbff605
-
SSDEEP
384:CzghFJvqLBx7p/gzVPXapRm39Jogx8lTXDjLEI3erUfA/UBuQcuXvkf1IMXpoXp0:CzCSFx7q939Jj0XsZ/8rXvOIMXSXhI
Malware Config
Signatures
Files
-
3dd205887844ad3df8c56c24a61eb3b9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
42:f6:f3:a2:ae:77:fb:85:49:07:85:07:3c:01:ba:d0Certificate
IssuerCN=Based_Tyrone\\LukeNot Before16-07-2015 05:18Not After15-07-2016 11:18SubjectCN=Based_Tyrone\\Luke4b:58:fe:d0:80:3a:20:74:fc:37:b2:b9:fb:74:26:56:ac:df:22:72:8d:4a:3f:3e:6d:77:6b:60:32:4c:ac:c1Signer
Actual PE Digest4b:58:fe:d0:80:3a:20:74:fc:37:b2:b9:fb:74:26:56:ac:df:22:72:8d:4a:3f:3e:6d:77:6b:60:32:4c:ac:c1Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ