Static task
static1
General
-
Target
LimboWeb.exe
-
Size
273KB
-
MD5
81c0b7b7a907c104b93dae67b2ee9113
-
SHA1
24c72983c692832645894c55525df6fa260e7fb3
-
SHA256
4d2992730b90b695a2eea2acf29da5086bb58de4969cd5323aed80de6668839e
-
SHA512
335fdd71b23f67b1eb1282f13efa3ca02bc0820698e226c7320daceaae53c00e80492a7a46ad354460131f84f6248f582bde6b3466684c2d689be0fcd1c4103d
-
SSDEEP
3072:h90bN00R6lYd2Dskjj2oIT0FnG0oWQg38wn:h9+N00klYdaQTynG0oWQQ
Malware Config
Signatures
Files
-
LimboWeb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
84:35:ae:e7:3b:cb:a4:8aCertificate
IssuerCN=NVIDIA GameStream ServerNot Before21/05/2023, 00:10Not After21/05/2043, 00:10SubjectCN=NVIDIA GameStream Server4b:2f:82:82:44:ae:21:96:06:24:91:ca:b3:67:45:9f:f2:54:0e:f7:e9:cf:8c:3a:aa:e6:8c:7f:e2:c1:f8:74Signer
Actual PE Digest4b:2f:82:82:44:ae:21:96:06:24:91:ca:b3:67:45:9f:f2:54:0e:f7:e9:cf:8c:3a:aa:e6:8c:7f:e2:c1:f8:74Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\Felhasznalo\source\repos\WindowsFormsApp4\WindowsFormsApp4\obj\x86\Debug\LimboWeb.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ