Static task
static1
Behavioral task
behavioral1
Sample
c451e9c724ae07e09af41f49de530d89e8c6efb5ba0d1cab55afbeb3a3bce4ff.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c451e9c724ae07e09af41f49de530d89e8c6efb5ba0d1cab55afbeb3a3bce4ff.exe
Resource
win10v2004-20240704-en
General
-
Target
c451e9c724ae07e09af41f49de530d89e8c6efb5ba0d1cab55afbeb3a3bce4ff
-
Size
155KB
-
MD5
cd2195cc7bcd0ff7eccb652943f8e7c7
-
SHA1
c583794ea424729ab6dc8467343e6bb049a41929
-
SHA256
c451e9c724ae07e09af41f49de530d89e8c6efb5ba0d1cab55afbeb3a3bce4ff
-
SHA512
b57d71c0459d23b30c82099e1b91f54a609f916672de784bc4bfa93234e4c0f03aaa1ca477db1f37f2d14b3bffe266c23ae41feb3172d09a1ffde4954f629adb
-
SSDEEP
3072:xpg2RZ5dspkGrSAqboKkoFh4/I8k88884888wxVoH:DH7pboKkoAA8k88884888wxVc
Malware Config
Signatures
Files
-
c451e9c724ae07e09af41f49de530d89e8c6efb5ba0d1cab55afbeb3a3bce4ff.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
58:df:08:b3:b9:1b:3a:b6:4c:3e:38:da:6b:cd:34:b9Certificate
IssuerCN=SERVER\\AndréNot Before19-06-2017 01:17Not After19-06-2018 07:17SubjectCN=SERVER\\André60:64:6d:94:b5:a7:32:94:0c:95:d0:4a:a9:c1:e0:79:a6:8c:0e:d5:26:b3:32:e3:d3:58:47:57:30:8b:0e:d8Signer
Actual PE Digest60:64:6d:94:b5:a7:32:94:0c:95:d0:4a:a9:c1:e0:79:a6:8c:0e:d5:26:b3:32:e3:d3:58:47:57:30:8b:0e:d8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\OneDrive\Eigene Programme\Filetransfer\Filetransfer\Filetransfer\obj\Debug\Filetransfer.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ