Static task
static1
Behavioral task
behavioral1
Sample
c911b684dfced1b4ba9c012bfd584870N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c911b684dfced1b4ba9c012bfd584870N.exe
Resource
win10v2004-20240802-en
General
-
Target
c911b684dfced1b4ba9c012bfd584870N
-
Size
16KB
-
MD5
c911b684dfced1b4ba9c012bfd584870
-
SHA1
4c8cb60ec0e3bbf00849151163d0fb3461408b50
-
SHA256
8216059a1d65d6833053e68343b3b2a6096496c1e991b325e70221419e36834a
-
SHA512
3ec0b7d6bbae5b1fce39ee79a5989dc2a312b0d2fab40d8aa32fe0018fa42767d823b5dfb53228e69072882d5cbade07ce39ba98197e870fdfd21558878c837e
-
SSDEEP
384:dHkvZSlt5Rx6YyNnvXuEM7PVeGQDuuuuuuu3IXSwtk:Nkv+jWhuP4GQDuuuuuuu3IXSAk
Malware Config
Signatures
Files
-
c911b684dfced1b4ba9c012bfd584870N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
5f:ee:b2:37:a1:9c:ea:b8:45:6f:b3:cb:10:ae:06:7bCertificate
IssuerCN=SHADOW-2RS7QD74\\ShadowNot Before30/08/2024, 18:40Not After31/08/2025, 00:40SubjectCN=SHADOW-2RS7QD74\\Shadowf5:99:d5:13:56:88:b1:ea:ed:5f:a3:3c:27:16:4b:7e:e2:35:9c:1a:04:4e:e5:9d:ab:1d:96:6b:d9:86:ae:a6Signer
Actual PE Digestf5:99:d5:13:56:88:b1:ea:ed:5f:a3:3c:27:16:4b:7e:e2:35:9c:1a:04:4e:e5:9d:ab:1d:96:6b:d9:86:ae:a6Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Shadow\code\telivy-backend\Visual Studio\TelivyRunner\obj\Debug\TelivyRunner.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ