Static task
static1
General
-
Target
4f8fd85bcb3dbb5d82d3194a2ac9742a8f0696685b69d425b1384d29e2260bf3
-
Size
2.0MB
-
MD5
c28c72944827aecc6e64211f91d082cd
-
SHA1
478e292f63cacdc9d43e095ce5ef7a3accb68cde
-
SHA256
4f8fd85bcb3dbb5d82d3194a2ac9742a8f0696685b69d425b1384d29e2260bf3
-
SHA512
d314b1b5ae22e8b75bb541adaba41f2f8d78bef3ee9274bb09336bc31a7ced83d9331525ebe519a02aebe6f7934ce85dd41fce1ca28cbdfa0bb7e123336573a7
-
SSDEEP
49152:pTLOo2UHbZL1t4l9x5RJRDRZRw4A3NJxSVNp/:p3Oo20R1al9R3DNHA3NJEl
Malware Config
Signatures
Files
-
4f8fd85bcb3dbb5d82d3194a2ac9742a8f0696685b69d425b1384d29e2260bf3.exe windows x86
872b100893e71f42afaaaf7ec1213694
Code Sign
55:91:42:53:86:2f:86:a9:47:f2:39:77:3c:27:e9:4eCertificate
IssuerCN=Kingston Fury Beast DDR4 2x16Gb CEK432C16BBK2/32Not Before01-02-2022 18:33Not After02-02-2032 18:33SubjectCN=Kingston Fury Beast DDR4 2x16Gb CEK432C16BBK2/328c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23-10-2020 00:00Not After22-01-2032 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
aa:4e:b5:8a:7a:46:7c:b5:52:ac:e9:f6:4e:b8:8f:48:98:a7:07:98:e8:f0:45:fd:61:f0:ef:56:db:82:65:09Signer
Actual PE Digestaa:4e:b5:8a:7a:46:7c:b5:52:ac:e9:f6:4e:b8:8f:48:98:a7:07:98:e8:f0:45:fd:61:f0:ef:56:db:82:65:09Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Kingston Fury Beast DDR4 2x16Gb CEK432C16BBK2/3202-02-2022 16:07 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
SendMessageA
advapi32
GetSidSubAuthority
comctl32
ImageList_SetBkColor
Sections
.bss Size: - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 847KB - Virtual size: 847KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE