Static task
static1
Behavioral task
behavioral1
Sample
a1a84442b6b14a3690248ae41af1c0cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1a84442b6b14a3690248ae41af1c0cf.exe
Resource
win10v2004-20240221-en
General
-
Target
a1a84442b6b14a3690248ae41af1c0cf
-
Size
673KB
-
MD5
a1a84442b6b14a3690248ae41af1c0cf
-
SHA1
540a29dc4d37d6cc37d3cdfbf9dbb384b650074d
-
SHA256
126cca34cf31624d9e706f69cb93c0bedcdc6f5076fff77cc47fe3f8d0bef6ef
-
SHA512
a2b01978107cfd28656948f15a095ed258eec833281f1487dc87e041ffbdc147f1deedb3186003a5157c8fd8fcf765ca1085ea9c31476f4bf8f8005f9e649d50
-
SSDEEP
12288:683GJe3rsmou3iltQbqiTgSd/Mi7/Uv87MhyppL+pJXvFmwKS2Wu7k:JWJfmgeqiT/77cvyMhyppK/FmKu7k
Malware Config
Signatures
Files
-
a1a84442b6b14a3690248ae41af1c0cf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=ForthHost LLC,O=Internet Widgits Pty Ltd,L=ForthHost LLC,ST=London Province,C=uk,1.2.840.113549.1.9.1=#0c15636f6e7461637440666f727468686f73742e636f6dNot Before03/11/2014, 14:08Not After03/11/2015, 14:08SubjectCN=ForthHost LLC,O=Internet Widgits Pty Ltd,L=ForthHost LLC,ST=London Province,C=uk,1.2.840.113549.1.9.1=#0c15636f6e7461637440666f727468686f73742e636f6dc8:ac:46:42:c1:3b:02:82:0b:35:14:61:75:4d:a4:f6:5a:a5:b7:cfSigner
Actual PE Digestc8:ac:46:42:c1:3b:02:82:0b:35:14:61:75:4d:a4:f6:5a:a5:b7:cfDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ