Static task
static1
Behavioral task
behavioral1
Sample
cdd0e4fd1f179eca1dddfd7ae6226ef2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdd0e4fd1f179eca1dddfd7ae6226ef2.exe
Resource
win10v2004-20240226-en
General
-
Target
cdd0e4fd1f179eca1dddfd7ae6226ef2
-
Size
792KB
-
MD5
cdd0e4fd1f179eca1dddfd7ae6226ef2
-
SHA1
4e6d3bd78e0d48597da196c9382fab34e610be06
-
SHA256
6064112787ee5de5c29a9f18b6b6b54f32d813d5d873e427383a9fb80562f5d1
-
SHA512
197a06f7fb857224160abe21410ba540acb39217f583acb3650a51c352617375130281b2ede4bcb9cbf37c0c5d5c741a00328aa5e128f52ec1f90dd4053e159f
-
SSDEEP
12288:uxzrvKn5wWI4GS+Appg45j3R1VxzAbVw3de+LJG7ZkpaXrxjuNGlbUTXDEI8qVDm:uxz25JIBZAppg4Fp5AbVwJmq2drbkgWY
Malware Config
Signatures
Files
-
cdd0e4fd1f179eca1dddfd7ae6226ef2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6dNot Before14/07/2015, 15:56Not After08/07/2016, 15:56SubjectCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6d7f:7a:3f:09:ca:f6:26:c5:7f:eb:5a:a9:0f:e5:68:b1:f0:17:2d:ddSigner
Actual PE Digest7f:7a:3f:09:ca:f6:26:c5:7f:eb:5a:a9:0f:e5:68:b1:f0:17:2d:ddDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 776KB - Virtual size: 775KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ