Static task
static1
Behavioral task
behavioral1
Sample
8f912aade731f2989ad8e21707c32fbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f912aade731f2989ad8e21707c32fbb.exe
Resource
win10v2004-20231215-en
General
-
Target
8f912aade731f2989ad8e21707c32fbb
-
Size
361KB
-
MD5
8f912aade731f2989ad8e21707c32fbb
-
SHA1
59e8f2d8202e1d802d98a2cc4136d9ae5184ca35
-
SHA256
12a67bb41066eb4a67ca344291a4ef3716140c6f4dc00d0dc5f78f00f45f0335
-
SHA512
5e17260db7e0d251bc213ca168593e40c712dcf4667bdee6f17bb3c8e37a0475b99d8a4b741afe16fb47693e602047abd8ba92c53b9686d742aaf8cc31896ed1
-
SSDEEP
6144:S/DoWxFD3ElVlZpSrjxlrX/JCcLLv31jGc6Dgp6WAw5R6SlzEfL4apuZsAXrJHT1:SNFD3E3lZwjjrXpv31h6cp66R6IYLt0h
Malware Config
Signatures
Files
-
8f912aade731f2989ad8e21707c32fbb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
6c:7c:17:23:38:1a:15:a4:41:61:85:1a:89:4b:f5:45Certificate
IssuerCN=SmartFTP ClientNot Before02/01/2014, 12:56Not After02/01/2114, 12:56SubjectCN=SmartFTP Client1e:2f:dc:bb:a6:c9:ab:77:e2:99:6d:d5:6a:40:4e:17:bd:69:a8:d3Signer
Actual PE Digest1e:2f:dc:bb:a6:c9:ab:77:e2:99:6d:d5:6a:40:4e:17:bd:69:a8:d3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ