Static task
static1
Behavioral task
behavioral1
Sample
e05ac782a099196cfdbd49c10b3d736e.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e05ac782a099196cfdbd49c10b3d736e.exe
Resource
win10v2004-20240226-en
General
-
Target
e05ac782a099196cfdbd49c10b3d736e
-
Size
15.7MB
-
MD5
e05ac782a099196cfdbd49c10b3d736e
-
SHA1
1d1086725b300e495cdf12e70188327bf17f6c1b
-
SHA256
10492dfe23aa3730746d5312da600d79c455edf95b6142ab6954aa9fa73b5698
-
SHA512
9e3bf2acb338ba02a5b062449935bad20753aa16a82f8e1dcaad74cf6cfe473a3ebd5e5003c931798ec44dbd24a03d5eb4d435627029684223a0dcd23d17dec0
-
SSDEEP
393216:QBrmIZPBQRi3LZVzH3EKOm0WrGRKpGij0YLxW:QBRpQRi9VzXR2W3pdj0YLE
Malware Config
Signatures
Files
-
e05ac782a099196cfdbd49c10b3d736e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
11:51:ed:3f:f4:6e:8a:b0:49:c1:a1:f5:ef:50:4c:3bCertificate
IssuerCN=komp\\KrzysiekNot Before29/06/2017, 19:26Not After30/06/2018, 01:26SubjectCN=komp\\Krzysiekf2:64:48:b2:4d:26:a8:d1:df:86:8a:86:7e:42:39:17:ee:bd:d0:7d:76:25:23:14:c1:bf:d7:eb:b4:f9:0c:14Signer
Actual PE Digestf2:64:48:b2:4d:26:a8:d1:df:86:8a:86:7e:42:39:17:ee:bd:d0:7d:76:25:23:14:c1:bf:d7:eb:b4:f9:0c:14Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
c:\TESTY WTF\MEMORIES OF MARS\WindowsFormsApp6\obj\Release\MEMORIES OF MARS - InstallShield Wizard.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 15.7MB - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ