Static task
static1
Behavioral task
behavioral1
Sample
1d7545dbd687fff17e8032737ae7daddde7b93a14b89136adf9b9052d75deae1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d7545dbd687fff17e8032737ae7daddde7b93a14b89136adf9b9052d75deae1.exe
Resource
win10v2004-20240508-en
General
-
Target
1d7545dbd687fff17e8032737ae7daddde7b93a14b89136adf9b9052d75deae1
-
Size
2.7MB
-
MD5
433cd17ca33e44f5d4cbf0c9276370c2
-
SHA1
017dd3fca278cf25e1d2780c0c9b06e47f7052c7
-
SHA256
1d7545dbd687fff17e8032737ae7daddde7b93a14b89136adf9b9052d75deae1
-
SHA512
2c97360a998467ee37d746b4aac18671b5ed37ce3894a9bc0639f148ba3414d7435155c209d89dfb7c25d62f04463c117a3dabaccaedc388ebf861c79690d404
-
SSDEEP
49152:XQUGBIBA/DJooEpEAt4Ue8IpLPHBDc7eOBof6sBlYy2NaJY7cz:XHGBIBA/FoNCbHAeO86OlOUY76
Malware Config
Signatures
Files
-
1d7545dbd687fff17e8032737ae7daddde7b93a14b89136adf9b9052d75deae1.exe windows:6 windows x86 arch:x86
Code Sign
35:7c:9f:1a:c4:a7:d3:76:bf:14:82:ab:ea:3f:0f:40Certificate
IssuerCN=Flattodwiken Summoners GroupNot Before05/02/2023, 21:00Not After05/02/2024, 21:00SubjectCN=Flattodwiken Summoners Groupa2:c6:9f:95:00:3e:dd:77:5c:ef:6a:5a:d0:44:c3:aa:62:df:76:05:b3:76:a9:a0:44:70:7b:f5:f9:ff:1d:1aSigner
Actual PE Digesta2:c6:9f:95:00:3e:dd:77:5c:ef:6a:5a:d0:44:c3:aa:62:df:76:05:b3:76:a9:a0:44:70:7b:f5:f9:ff:1d:1aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.7MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 293KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtmetad Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE