Static task
static1
Behavioral task
behavioral1
Sample
ac00e07c581d370d0e55ed209cb4409d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac00e07c581d370d0e55ed209cb4409d.exe
Resource
win10v2004-20240226-en
General
-
Target
ac00e07c581d370d0e55ed209cb4409d
-
Size
44KB
-
MD5
ac00e07c581d370d0e55ed209cb4409d
-
SHA1
198708fb66655d0d0e592f7fec25525e9cc3874d
-
SHA256
467d8f8b80909da925d843b51d9d708535dded0ac44a10dcf78fa14809937e01
-
SHA512
6a95701c57d9a929be306538797b973494dc3c787503bb6ece9f796ebe25b6e5788766f3a8f036e98eb3bfab4765282ff33f5ccc9be1bfddb80e8e49332d8ed5
-
SSDEEP
768:Zw3ecHgvvwHONSAssOAcFq8mH6ATaY/jSzyw:W3eH3sUss8c8mH6mEJ
Malware Config
Signatures
Files
-
ac00e07c581d370d0e55ed209cb4409d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7d:46:c5:7f:79:99:c9:82:46:57:47:ad:67:ba:74:8fCertificate
IssuerCN=DESKTOP-171AVQP\\AdminNot Before31/07/2021, 10:10Not After31/07/2022, 16:10SubjectCN=DESKTOP-171AVQP\\Adminb9:d1:d8:4e:74:41:16:2a:d7:58:65:50:74:c7:b9:1b:64:6e:79:01:c9:dc:26:65:1f:b7:76:b2:ab:8c:0c:aeSigner
Actual PE Digestb9:d1:d8:4e:74:41:16:2a:d7:58:65:50:74:c7:b9:1b:64:6e:79:01:c9:dc:26:65:1f:b7:76:b2:ab:8c:0c:aeDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\YEN\WindowsAppWireless\WindowsAppWireless\obj\Debug\WindowsAppWireless.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ