Static task
static1
Behavioral task
behavioral1
Sample
mario steals your liver but real lol.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
mario steals your liver but real lol.exe
Resource
win10v2004-20240226-en
General
-
Target
mario steals your liver but real lol.exe
-
Size
24KB
-
MD5
d4ea370ca8486a28aae6a6957a2ff849
-
SHA1
d3f1f9aa296c73ae26c7e5e2c50d47e120358f28
-
SHA256
e37c55ea4daab3af861ad81961d391157c855042fb0b04c2c9d0f68515fec2ce
-
SHA512
70840673eadd9bdf5d2a569868b014fc380b9eb4fcf479c68dc81e87da79b5ca4ad60e300d189b074cd9f028138e681886fd329dffbd0620fbd3f32172a29003
-
SSDEEP
384:SEy1jhIzPOFVAwiIFXOKzTWDInrdkg5U2gvQU8F0/c8KcGJHZxrHC7MrTEf7yQ3s:SHeqFziSeKPFZ7gR8F0Zng+7iTW7yQ3s
Malware Config
Signatures
Files
-
mario steals your liver but real lol.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
54:ae:3c:e5:66:a7:f5:ad:4f:07:07:f3:e1:fe:57:02Certificate
IssuerCN=LAPTOP-9I5UOKSS\\50767Not Before19-03-2022 22:40Not After20-03-2023 04:40SubjectCN=LAPTOP-9I5UOKSS\\5076748:a4:e9:e9:c5:61:8a:a0:fa:18:35:d4:c1:c7:37:27:1d:0e:22:0a:20:a0:85:d1:24:96:69:8b:c7:8d:6d:87Signer
Actual PE Digest48:a4:e9:e9:c5:61:8a:a0:fa:18:35:d4:c1:c7:37:27:1d:0e:22:0a:20:a0:85:d1:24:96:69:8b:c7:8d:6d:87Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\50767\Documents\visual studio 20-19\mario steals\mario steals your liver\mario steals your liver\obj\Debug\mario steals your liver but real lol.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ