Static task
static1
Behavioral task
behavioral1
Sample
01194528b4d05eb34ddf206718d613aa944545f135c342ef7dfbfb097b592895.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
01194528b4d05eb34ddf206718d613aa944545f135c342ef7dfbfb097b592895.exe
Resource
win10v2004-20240226-en
General
-
Target
01194528b4d05eb34ddf206718d613aa944545f135c342ef7dfbfb097b592895
-
Size
2.8MB
-
MD5
bba9a6d258dab914516c9791a9c203b4
-
SHA1
1b504c97799e19b17f88dc9f20d57e891e5dd6a4
-
SHA256
01194528b4d05eb34ddf206718d613aa944545f135c342ef7dfbfb097b592895
-
SHA512
f188efea9fc06b181db5f02ab6f0ebb30d5c4cf58ea4b4959037bd2ab27a336c59227cc6310849b3e373754401aba0f1a19ae8ca5f72d09a701ea43ef659b5bf
-
SSDEEP
49152:vBXBBkUTAUVPCsKLzsGlmKmhV1RLRGMvOXxS+jHvRUg6Ik+JMe+ayf6sB/vANaZz:ZXBBkUjbrGlmFhHjGMaRjH5Ug6Ik+JxO
Malware Config
Signatures
Files
-
01194528b4d05eb34ddf206718d613aa944545f135c342ef7dfbfb097b592895.exe windows:6 windows x86 arch:x86
Code Sign
60:ba:f0:33:0b:01:21:67:b1:70:e1:da:da:8c:d1:a6Certificate
IssuerCN=Somers Bobbins GroupNot Before06-02-2023 08:00Not After06-02-2024 08:00SubjectCN=Somers Bobbins Group3a:f1:ec:57:60:32:26:8f:84:f2:e8:1e:11:8c:4f:0e:32:cb:d0:de:04:85:f4:e1:78:4e:10:71:1e:e5:1e:9dSigner
Actual PE Digest3a:f1:ec:57:60:32:26:8f:84:f2:e8:1e:11:8c:4f:0e:32:cb:d0:de:04:85:f4:e1:78:4e:10:71:1e:e5:1e:9dDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.8MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 291KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtmetad Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE