Static task
static1
Behavioral task
behavioral1
Sample
4f1cba3f701ae05e3234268cf17de70d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f1cba3f701ae05e3234268cf17de70d.exe
Resource
win10v2004-20231215-en
General
-
Target
4f1cba3f701ae05e3234268cf17de70d
-
Size
1.2MB
-
MD5
4f1cba3f701ae05e3234268cf17de70d
-
SHA1
151a1100e999dccbe94b33f75d48fdc0592165bd
-
SHA256
5126cfd21aeccb996cbaa5d7e4e418675ce1962cff65c5705691eb31d0df0aa5
-
SHA512
e134b61321130230149c99f515800597ef95359ecee363d4121d9ae21a91bdd2a9d6b2e81289d58480dea22500024ce8723a939907e0e0181c8fbbd960ba9ceb
-
SSDEEP
12288:kXvhStm4Ji/hHNorxHNor6/YynMOL/jNwE7HIiMAt02eV165gN5oilroe48s5Xvb:ShrnxWrBWr6/YI9wxiA2YgilroeYFb
Malware Config
Signatures
Files
-
4f1cba3f701ae05e3234268cf17de70d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
90:76:89:18:e9:33:93:a0Certificate
IssuerCN=invalid2.invalid,OU=No SNI provided\; please fix your client.Not Before01/01/2015, 00:00Not After01/01/2030, 00:00SubjectCN=invalid2.invalid,OU=No SNI provided\; please fix your client.fb:1e:36:6d:b9:dd:95:d6:21:43:cf:06:ee:ea:2c:cc:b0:b1:ba:1fSigner
Actual PE Digestfb:1e:36:6d:b9:dd:95:d6:21:43:cf:06:ee:ea:2c:cc:b0:b1:ba:1fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ