Static task
static1
Behavioral task
behavioral1
Sample
ad2699a085ca8424bfbfa0850093f36e1c909fe97a6ea96df487ced62971a9ee.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad2699a085ca8424bfbfa0850093f36e1c909fe97a6ea96df487ced62971a9ee.dll
Resource
win10v2004-20240802-en
General
-
Target
ad2699a085ca8424bfbfa0850093f36e1c909fe97a6ea96df487ced62971a9ee
-
Size
739KB
-
MD5
811b24219114b9e089dedec6fe6ddb79
-
SHA1
9a1a33dd238e89861aeced852b04a957d5dd870a
-
SHA256
ad2699a085ca8424bfbfa0850093f36e1c909fe97a6ea96df487ced62971a9ee
-
SHA512
d83fd5393994050761a30b7a9c82f2eedef45f0c45f9873efccc94876ae1ee81028d4264974657fa69928aa7603556cd4a40185ed26b0408b8a0543650115ad5
-
SSDEEP
12288:rjyerCn3SG4tGFGU+NzJHomqU6V1jnQxZdlCG3pFb6KtXX2nrfSNT6v2q6wC:HrCn3S0GfNzP76V1jnQxZdlCG3pFb6Kv
Malware Config
Signatures
Files
-
ad2699a085ca8424bfbfa0850093f36e1c909fe97a6ea96df487ced62971a9ee.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
36:5b:38:5e:b1:c0:ff:45:47:e2:33:07:d4:cb:b6:74:aa:27:b1:a7Certificate
IssuerCN=traderevolution,OU=IT,O=TraderEvolution Global Limited LTD,L=27 Meadowland Park\,Mounttown\,Co.Dublin\,Ireland,ST=Ireland,C=IE,1.2.840.113549.1.9.1=#0c2261646d696e697374726174696f6e4074726164657265766f6c7574696f6e2e636f6dNot Before12/03/2024, 10:22Not After17/03/2027, 10:22SubjectCN=traderevolution,OU=IT,O=TraderEvolution Global Limited LTD,L=27 Meadowland Park\,Mounttown\,Co.Dublin\,Ireland,ST=Ireland,C=IE,1.2.840.113549.1.9.1=#0c2261646d696e697374726174696f6e4074726164657265766f6c7574696f6e2e636f6d05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
25:bd:0d:db:29:c7:a5:4b:8e:d0:7b:1c:37:ac:3f:9c:eb:9f:93:c3:50:40:07:53:0b:af:15:d6:d4:c9:5e:15Signer
Actual PE Digest25:bd:0d:db:29:c7:a5:4b:8e:d0:7b:1c:37:ac:3f:9c:eb:9f:93:c3:50:40:07:53:0b:af:15:d6:d4:c9:5e:15Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Dev\SVG\Source\obj\Release\net461\Svg.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 729KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ