Static task
static1
Behavioral task
behavioral1
Sample
SpaceInfo.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SpaceInfo.exe
Resource
win10v2004-20240426-en
General
-
Target
SpaceInfo.exe
-
Size
19KB
-
MD5
572510b843a613927df117c275639fe5
-
SHA1
3fe5a06ad5066fb15e9742dae5cae878e303e574
-
SHA256
c132ff2a81957f445805e41f14c254af5de5a6f68a4df3f9ea07d3c54b5f96aa
-
SHA512
e99675f02560982be460ef7060a1651d5dd7adef7dfcbe7c5ad04ab28e75eb8421500556f8cf200dd1fb7ff778afbe30c600ebfef053b8abe8bcdfaa9dd209a1
-
SSDEEP
384:HRZorWMCvINo6uNysLaau6udj4L3LKLswgIB0ffa0OZ:HRZorWhvgo6KltXbWUIBSFu
Malware Config
Signatures
Files
-
SpaceInfo.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
5b:c6:12:81:ea:86:44:a0:49:a4:49:2f:da:c6:00:a9Certificate
IssuerCN=DESKTOP-EV9HCVI\\UserNot Before23-06-2021 06:12Not After23-06-2022 12:12SubjectCN=DESKTOP-EV9HCVI\\Userb6:14:5c:b5:88:41:58:7c:63:cb:ee:03:01:ab:36:60:1f:0d:b0:a1:f2:66:b0:6d:30:06:92:12:ea:cb:1e:cbSigner
Actual PE Digestb6:14:5c:b5:88:41:58:7c:63:cb:ee:03:01:ab:36:60:1f:0d:b0:a1:f2:66:b0:6d:30:06:92:12:ea:cb:1e:cbDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\交通局APP及時車位數網站\CarSpace\WindowsFormsApp1\obj\Release\SpaceInfo.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ