Static task
static1
Behavioral task
behavioral1
Sample
8fc95a1c3ad61164e9309caf8ff5ca3dcf8db5216fe0b5aa7aecf14161c73133.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8fc95a1c3ad61164e9309caf8ff5ca3dcf8db5216fe0b5aa7aecf14161c73133.exe
Resource
win10v2004-20240412-en
General
-
Target
8fc95a1c3ad61164e9309caf8ff5ca3dcf8db5216fe0b5aa7aecf14161c73133
-
Size
74KB
-
MD5
11924e718eb904b760060e0c9527f7e3
-
SHA1
582910404fb9da0568a77fbe42609c390a97f802
-
SHA256
8fc95a1c3ad61164e9309caf8ff5ca3dcf8db5216fe0b5aa7aecf14161c73133
-
SHA512
7ff8cc5fb826b371fce4cc0a82f453069d61c2c25d5618e62653b1ba852935d75114f4c6b142595e23fd00a3f10823d721a817dc31a96d1a91608e17f04c8274
-
SSDEEP
1536:AYd48GhwZWUmN3Nx9uI08HD8DtDvjbQYxutViie:Hd48GhwZWUmN9x9uI02Q97bLWVi7
Malware Config
Signatures
Files
-
8fc95a1c3ad61164e9309caf8ff5ca3dcf8db5216fe0b5aa7aecf14161c73133.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
ac:ce:e7:56:cf:9a:f4:41Certificate
IssuerCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e7074Not Before08/06/2018, 13:39Not After15/05/2118, 13:39SubjectCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e707429:b3:b1:af:d8:4d:ae:d5:94:d9:21:60:e8:22:63:40:e0:8b:0f:1aSigner
Actual PE Digest29:b3:b1:af:d8:4d:ae:d5:94:d9:21:60:e8:22:63:40:e0:8b:0f:1aDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ