Static task
static1
Behavioral task
behavioral1
Sample
435bf0400e261fdda8ea20d3e905f397bdfb4931c57a0026a230e568b8f82ca7.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
435bf0400e261fdda8ea20d3e905f397bdfb4931c57a0026a230e568b8f82ca7.exe
Resource
win10v2004-20240508-en
General
-
Target
435bf0400e261fdda8ea20d3e905f397bdfb4931c57a0026a230e568b8f82ca7
-
Size
14.4MB
-
MD5
fe58711320892e139c6846e2412288f5
-
SHA1
c0cbbd78857562e92483c352b31b6373bd6d61ec
-
SHA256
435bf0400e261fdda8ea20d3e905f397bdfb4931c57a0026a230e568b8f82ca7
-
SHA512
37ea1b7e32f2c641818b8c9dcd56d4eea23b57b4d18863ece0054da186d9a3899cc14c516cf1fc70a6c273698f1b9c441b117752637ccd0a6d1867c1bbd928e4
-
SSDEEP
196608:q16yrulJL1hcw2nFJG/btLHSpeGlVME3zIHQbFxnd79k0piqcimEW/Rwik:26iu/yFJe4ME3zdJ1dGXriK/Rnk
Malware Config
Signatures
Files
-
435bf0400e261fdda8ea20d3e905f397bdfb4931c57a0026a230e568b8f82ca7.exe windows:4 windows x86 arch:x86
32c5de998b5f069b26c94c8143b13c06
Code Sign
0c:bf:a1:0c:ee:b1:f7:81:48:af:58:92:56:9d:fe:85Certificate
IssuerCN=Lbh-ssy-CA v1.01Not Before31/12/1999, 16:00Not After07/08/8888, 16:00SubjectCN=Lbh-ssy-CA v1.01Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 13.6MB - Virtual size: 13.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ