Static task
static1
Behavioral task
behavioral1
Sample
a6388feeb24e7618a50f2069bab0cca5aa27ec3b059ff69b18660d8893a7c1c3.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a6388feeb24e7618a50f2069bab0cca5aa27ec3b059ff69b18660d8893a7c1c3.exe
Resource
win10v2004-20240419-en
General
-
Target
a6388feeb24e7618a50f2069bab0cca5aa27ec3b059ff69b18660d8893a7c1c3
-
Size
102KB
-
MD5
61c7dc5db53a114168c2c26082751f3d
-
SHA1
42ade1be53a974e3e2e79a3de0e54bb07dcda751
-
SHA256
a6388feeb24e7618a50f2069bab0cca5aa27ec3b059ff69b18660d8893a7c1c3
-
SHA512
78f7d056ab7ca40b55b19e95242238a305392e8646b10d9242043289b1eeb04640a92faebd36acc07af50e99465626f2ee1028e634991d2724a65934e4ee29aa
-
SSDEEP
1536:4dSO5krNtQNFHrYgcDEe7A+YELIc2NfVs/jpKOMqzbuW6WEdSO5krNtQNF8:2SKksFHr+7AsLIHNd0LP7ySKksF8
Malware Config
Signatures
Files
-
a6388feeb24e7618a50f2069bab0cca5aa27ec3b059ff69b18660d8893a7c1c3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
2f:e1:f5:5e:70:6d:c0:b0:44:83:da:24:0f:b1:df:9fCertificate
IssuerCN=MOOG\\clee5Not Before16/04/2015, 19:55Not After16/04/2016, 01:55SubjectCN=MOOG\\clee5e4:d0:bf:a9:31:d0:da:2b:0d:3d:45:a1:e4:29:1d:e2:50:eb:fb:6f:8e:8c:77:94:ac:5d:21:ec:9b:82:3b:6eSigner
Actual PE Digeste4:d0:bf:a9:31:d0:da:2b:0d:3d:45:a1:e4:29:1d:e2:50:eb:fb:6f:8e:8c:77:94:ac:5d:21:ec:9b:82:3b:6eDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\clee5\Documents\Visual Studio 2013\Projects\Probe Conversion Artifact\Probe Conversion\obj\Debug\Probe Conversion.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ