Static task
static1
Behavioral task
behavioral1
Sample
c1a3bd9a348c944e692247ec187155d8dd5ba0f6c868641914c7d6953b8e819b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1a3bd9a348c944e692247ec187155d8dd5ba0f6c868641914c7d6953b8e819b.exe
Resource
win10v2004-20240508-en
General
-
Target
c1a3bd9a348c944e692247ec187155d8dd5ba0f6c868641914c7d6953b8e819b
-
Size
286KB
-
MD5
a7f466978d9c5c8b3e6257d68dbef547
-
SHA1
d69ea30c099219ce06afaf0343167e6c3d3ab3bc
-
SHA256
c1a3bd9a348c944e692247ec187155d8dd5ba0f6c868641914c7d6953b8e819b
-
SHA512
21157b93453d5471d57e8167f922922ca76e2b92989b984b96eb93733b4580c9436bddb71b71dc582cbd90e4bdaca80e1653e68ec748a00fd7429c76f3c4704d
-
SSDEEP
6144:KWLP+Azdy7hl3U6PEAVAX5NCLP+Azdy7hl3U6PEAVAX5NW:vFAqX5YFAqX5k
Malware Config
Signatures
Files
-
c1a3bd9a348c944e692247ec187155d8dd5ba0f6c868641914c7d6953b8e819b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7f:f1:46:5d:cb:25:dc:92:43:25:fe:b5:ae:bc:8a:d7Certificate
IssuerCN=BBAAVIATION\\szhoy4Not Before03/05/2017, 18:15Not After04/05/2018, 00:15SubjectCN=BBAAVIATION\\szhoy4e6:91:42:ca:c8:d4:5a:9d:47:37:12:af:2f:33:af:97:f1:fe:eb:15:6d:7d:62:11:49:57:17:b7:19:f9:19:e4Signer
Actual PE Digeste6:91:42:ca:c8:d4:5a:9d:47:37:12:af:2f:33:af:97:f1:fe:eb:15:6d:7d:62:11:49:57:17:b7:19:f9:19:e4Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\PhishingButton\Phishing Button\Phishing Button\obj\Debug\Phishing Button.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ