Static task
static1
Behavioral task
behavioral1
Sample
ac5b8e204c45f7d63727202bf4ad9d6a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac5b8e204c45f7d63727202bf4ad9d6a.exe
Resource
win10v2004-20240226-en
General
-
Target
ac5b8e204c45f7d63727202bf4ad9d6a
-
Size
334KB
-
MD5
ac5b8e204c45f7d63727202bf4ad9d6a
-
SHA1
1e150f1944d8cd4f1a94511a78809f739004d020
-
SHA256
3206cf8850c8095c3fc4d1223767f9d5511cbee75c08170399348cbd224cd70c
-
SHA512
1c1fb61ea5bf06a7e6f0574847f426af3c95c483e999b9985546b903d6d6061684b78231f198123608ce40ca53c8fb0165a258c6dbdcfb14bdf81f44f0fb07e0
-
SSDEEP
6144:3sUJkGvT5CuhclKCPjVYB9Dh8AhZOcoFHMPPP3thePxe:cUxb5rmlK0jVYBRhPOotheP8
Malware Config
Signatures
Files
-
ac5b8e204c45f7d63727202bf4ad9d6a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
1e:5f:62:c8:9d:d3:e5:a8:43:03:0f:3c:ae:73:67:d4Certificate
IssuerCN=DESKTOP-AA80VQ7\\DinesNot Before08/06/2021, 05:40Not After08/06/2022, 11:40SubjectCN=DESKTOP-AA80VQ7\\Dines37:a5:dc:5e:84:d0:94:05:c5:2e:45:77:45:d6:52:e5:c8:5a:f3:52:0b:0f:06:5d:03:ea:07:cd:01:ff:3b:48Signer
Actual PE Digest37:a5:dc:5e:84:d0:94:05:c5:2e:45:77:45:d6:52:e5:c8:5a:f3:52:0b:0f:06:5d:03:ea:07:cd:01:ff:3b:48Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
E:\JOY VPN\SAFE\SimpleVPN-master\Simple_VPN\obj\Debug\JOY VPN.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ