Static task
static1
Behavioral task
behavioral1
Sample
Resilence.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Resilence.exe
Resource
win10v2004-20240802-en
General
-
Target
Resilence.exe
-
Size
680KB
-
MD5
98ed12bfb13b158f2ecd94b291a31d96
-
SHA1
79c2e4e12cbc22adf870ffc920c0448a33ebfd32
-
SHA256
cd2643b9bf77ec150871ec8223cb50148ac8d5f2652f4fd07af3080a66d9f9ee
-
SHA512
a00728cc78334aa55296ef74d8e425796c2a2dfac9514fb0123a18b98b1f7e7ee314ccf23f28fe2e51944b8ba1dfccc49f03ea9479729abd7802ffbedbb8d04d
-
SSDEEP
12288:8rR+QyTGulxK+wseqPpEFfj7/K2U3LGyOQeBaX+cKZ4ZjR24DYtSckoqZtSckv:y8TXXPpEhazOZhF4Zj84DPs9
Malware Config
Signatures
Files
-
Resilence.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
78:6d:c0:2d:e0:3e:58:9e:46:1e:d5:ee:a2:cf:fa:deCertificate
IssuerCN=DESKTOP-243GH7J\\michasNot Before03/08/2024, 19:50Not After04/08/2025, 01:50SubjectCN=DESKTOP-243GH7J\\michasfb:ee:82:f3:83:82:1a:9b:dd:01:86:13:79:89:2c:ba:7d:a5:b4:5f:75:62:7f:e0:1a:3f:f5:3d:a1:5a:0c:15Signer
Actual PE Digestfb:ee:82:f3:83:82:1a:9b:dd:01:86:13:79:89:2c:ba:7d:a5:b4:5f:75:62:7f:e0:1a:3f:f5:3d:a1:5a:0c:15Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\michas\Desktop\Resilence Development\Resilence Development\Resilence Development\obj\Debug\Resilence.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 643KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ