Static task
static1
Behavioral task
behavioral1
Sample
e1de8c6df6ab48ae7aefe5f3a45419ec25edfe4002bba7d9b789b9cdf6154b28.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e1de8c6df6ab48ae7aefe5f3a45419ec25edfe4002bba7d9b789b9cdf6154b28.exe
Resource
win10v2004-20240508-en
General
-
Target
e1de8c6df6ab48ae7aefe5f3a45419ec25edfe4002bba7d9b789b9cdf6154b28
-
Size
444KB
-
MD5
a3e790ae052d9a74c8312c28ff758d59
-
SHA1
d5e02df7dfd987f4425d2bceaa894d50c4e536a3
-
SHA256
e1de8c6df6ab48ae7aefe5f3a45419ec25edfe4002bba7d9b789b9cdf6154b28
-
SHA512
adbe742d1e81a4db24c96ad11c148ed12ade27f7ccba4c5709866b86bf2833024b1ee3a41e738c6a088af3bddc582a07bfff48abc425200716c00e482fe40127
-
SSDEEP
6144:ADRSfdwTzXibvEfb3BywGiYeZTKaXxJPu1oA24gDHuOsG0Gi40iDU046F+rD7Zlc:ADRwdwXiwRrXxhdSgDlFmiQ0BMuiQ0e
Malware Config
Signatures
Files
-
e1de8c6df6ab48ae7aefe5f3a45419ec25edfe4002bba7d9b789b9cdf6154b28.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
36:da:d8:0e:e3:e7:33:97:49:53:73:7e:2e:3e:2b:01Certificate
IssuerCN=GPU1\\infoeNot Before01/03/2024, 03:27Not After01/03/2025, 09:27SubjectCN=GPU1\\infoe9d:c1:46:58:dd:1f:6b:3b:7f:cc:c5:5e:8b:84:42:8a:7d:5f:3a:dd:ff:4a:59:30:1f:7e:d0:86:6e:a3:4e:b3Signer
Actual PE Digest9d:c1:46:58:dd:1f:6b:3b:7f:cc:c5:5e:8b:84:42:8a:7d:5f:3a:dd:ff:4a:59:30:1f:7e:d0:86:6e:a3:4e:b3Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 418KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ