Static task
static1
General
-
Target
Integrierte Leitstelle - Die Simulation.exe
-
Size
5.8MB
-
MD5
dcb1a9c8f456ed95888008cda636f958
-
SHA1
811ec2bfab038b291f11f5343f430781d2386a4f
-
SHA256
59972f13a8cfe64b0b139c7eb2d04fd5d072c9118cdc9502b90001e3e860d5e4
-
SHA512
37f062ea18d81c766d91ff901d2faeed8de2ace511212b670272c5fc19d4af916aa0545e0c3736accdcf80b86cf8f1ede2d6548016b8a42b06b0924dae6c3fde
-
SSDEEP
98304:5bcicpBK2QGtABEZgEcdhY8CezAe3VbHdClZsng7B/MsKkit1w0CdmEXVzWyxY38:B5cpE/Q3cdh+q5wZwkN0CdhFzWyxYM
Malware Config
Signatures
Files
-
Integrierte Leitstelle - Die Simulation.exe.exe windows:1 windows x86 arch:x86
Code Sign
48:33:fb:e1:aa:55:59:b6:40:2a:6c:b3:3b:a8:83:07Certificate
IssuerCN=KEANO-PC\\KeanoNot Before02/02/2021, 13:58Not After02/02/2022, 19:58SubjectCN=KEANO-PC\\Keano0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/01/2021, 00:00Not After06/01/2031, 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:4c:2c:6a:f1:ae:07:f2:cc:4f:50:40:b5:ab:5b:31:7a:52:de:e6:ea:66:22:67:82:bf:d5:eb:26:db:8d:e8Signer
Actual PE Digest08:4c:2c:6a:f1:ae:07:f2:cc:4f:50:40:b5:ab:5b:31:7a:52:de:e6:ea:66:22:67:82:bf:d5:eb:26:db:8d:e8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ