Static task
static1
Behavioral task
behavioral1
Sample
Program_0y4vUZA7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Program_0y4vUZA7.exe
Resource
win10v2004-20240226-en
General
-
Target
Program_0y4vUZA7.exe
-
Size
692KB
-
MD5
2756070df4e8bddd0c7f3fc96f4cdf0d
-
SHA1
2b303df96b4dc52f70b2b317229d72203fc1f78e
-
SHA256
22177ff2b587013092d1a53abcb6d85f6a08d840c296db6865af27d7d7e0f97d
-
SHA512
85183f73943fa852ae764d2a5747f611f78e7d84989c501c0fd4215ce2f40896e23b310ce533dd9e19fd85ba6e18b698a9d40a63ecc1a9bb5a28d177f1e2e435
-
SSDEEP
6144:usL/nKtKbxdrUFgj00Z6dO1FvgbOpVQF2UhhN8L3KnKuDx64RW7bwoV66wEBCLAH:Pvo5FK00Z6MbQBhOKKqx6maVXELAcQ
Malware Config
Signatures
Files
-
Program_0y4vUZA7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
3b:21:71:6e:51:33:9e:be:4d:e0:3c:67:ec:c3:1c:c0Certificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before16/12/2023, 19:19Not After31/12/2039, 23:59SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USc4:01:74:86:a9:5f:88:6d:ba:15:e3:01:2c:d8:d1:18:47:7f:cd:edSigner
Actual PE Digestc4:01:74:86:a9:5f:88:6d:ba:15:e3:01:2c:d8:d1:18:47:7f:cd:edDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ