Static task
static1
Behavioral task
behavioral1
Sample
b1b23640418b4efe1a6c5fc11e59f37a09a24bed95acd0c40392b3a1a4335adb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b1b23640418b4efe1a6c5fc11e59f37a09a24bed95acd0c40392b3a1a4335adb.exe
Resource
win10v2004-20240426-en
General
-
Target
b1b23640418b4efe1a6c5fc11e59f37a09a24bed95acd0c40392b3a1a4335adb
-
Size
248KB
-
MD5
f1e85367146bfed09a65442d1adf840f
-
SHA1
b0214be0b9a6505f504d2b7a57e7214fd1700e53
-
SHA256
b1b23640418b4efe1a6c5fc11e59f37a09a24bed95acd0c40392b3a1a4335adb
-
SHA512
26d9a0611009971bf6a372918ab43a7e8740c5d6cae4da51bb30aa3dfc7b0ecfb2dc143bfc0305bcb937dca58a8f7046e8eea1b9cb57b4fca9be959ddfb5b5b9
-
SSDEEP
6144:ykQmx/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jAoVq2bw:ykuBREcUkHxy8yAoVW
Malware Config
Signatures
Files
-
b1b23640418b4efe1a6c5fc11e59f37a09a24bed95acd0c40392b3a1a4335adb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
51:a9:c6:77:f3:35:54:a4:4d:6a:5f:51:00:7b:ec:faCertificate
IssuerCN=NULL\\andjoNot Before13/05/2024, 01:05Not After13/05/2025, 07:05SubjectCN=NULL\\andjo9e:48:8e:ea:fa:16:6e:4e:c8:13:31:b8:7f:4d:6a:53:56:bf:3c:69:3d:6e:e9:a7:dd:7d:86:4f:fc:89:87:0bSigner
Actual PE Digest9e:48:8e:ea:fa:16:6e:4e:c8:13:31:b8:7f:4d:6a:53:56:bf:3c:69:3d:6e:e9:a7:dd:7d:86:4f:fc:89:87:0bDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ