Static task
static1
Behavioral task
behavioral1
Sample
5a16517243fa71bdde34df129c00e0f433f8e87fc61399b9668aaf949828393c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a16517243fa71bdde34df129c00e0f433f8e87fc61399b9668aaf949828393c.exe
Resource
win10v2004-20240508-en
General
-
Target
5a16517243fa71bdde34df129c00e0f433f8e87fc61399b9668aaf949828393c
-
Size
1.7MB
-
MD5
ed84040cda4a9fd164b6319ef54711d2
-
SHA1
d4464212b112e8ae1f5477ce44aa397876d44a83
-
SHA256
5a16517243fa71bdde34df129c00e0f433f8e87fc61399b9668aaf949828393c
-
SHA512
b21555cbf4c05d112b8832dc0cc47e826e7fc910f27404f687fb3121cb3177e65a40848e7b969b88eb6005771bef475d230c1d18493cc2d647868ac75bbb1807
-
SSDEEP
24576:5cTpyzoOVvnRXNt4WI3ieEftsCICAs8JcFQvPYKZHHgU:CTQ7nRajEftL8J/xZgU
Malware Config
Signatures
Files
-
5a16517243fa71bdde34df129c00e0f433f8e87fc61399b9668aaf949828393c.exe windows:4 windows x64 arch:x64
Code Sign
53:d1:7b:b2:65:53:5d:a7:4c:37:4d:69:b8:9e:7c:b2Certificate
IssuerCN=JACKIE-MBP16\\JackieNot Before20-04-2024 09:55Not After20-04-2025 15:55SubjectCN=JACKIE-MBP16\\Jackie05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
65:9d:a9:09:e8:5d:52:09:4c:71:ac:5e:79:81:8b:1a:c0:e2:04:33:6f:67:7e:6e:ae:df:ac:ac:84:d2:ac:8aSigner
Actual PE Digest65:9d:a9:09:e8:5d:52:09:4c:71:ac:5e:79:81:8b:1a:c0:e2:04:33:6f:67:7e:6e:ae:df:ac:ac:84:d2:ac:8aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
T:\VB.NET\DLS - Quan ly nghiep vu\DLS - Quan ly nghiep vu\obj\x64\Release\Quan Ly Nghiep Vu.pdb
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ