Static task
static1
Behavioral task
behavioral1
Sample
061f2c30dab7fba05b0891db935191620e890acc20231245bb01a4489ffe2fb6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
061f2c30dab7fba05b0891db935191620e890acc20231245bb01a4489ffe2fb6.exe
Resource
win10v2004-20220812-en
General
-
Target
061f2c30dab7fba05b0891db935191620e890acc20231245bb01a4489ffe2fb6
-
Size
57KB
-
MD5
67bad47c40fae36bc7ee6c9419d4dd6e
-
SHA1
47f3883da7ac4ebee6fdf3429284b14c95fd6af7
-
SHA256
061f2c30dab7fba05b0891db935191620e890acc20231245bb01a4489ffe2fb6
-
SHA512
e2d0670b38b175216f73b1c8757d2a394ea03ace37fe7024a9626e3662f4e05bb52422844b071dfe4ccecc8979525bdefbafabde45866cde695a959a8d7a35a8
-
SSDEEP
768:i2lwfnEkvIAKwFpl+2y7H3ED7TGHA52m0Z59+h8wETUsZk+zat6bCq:VlqnEk/KepJw3EDOH7mwiGzz+CCq
Malware Config
Signatures
Files
-
061f2c30dab7fba05b0891db935191620e890acc20231245bb01a4489ffe2fb6.exe windows x86
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29/01/1996, 00:00Not After01/08/2028, 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US67:24:34:0d:db:c7:25:2f:7f:b7:14:b8:12:a5:c0:4dCertificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before27/11/2009, 00:00Not After27/11/2011, 23:59SubjectCN=YNK JAPAN Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=YNK JAPAN Inc,L=\ Nihonbashi Kodenmachou10-6,ST=Chuo-ku,C=JPExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21/05/2009, 00:00Not After20/05/2019, 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
d4:d9:8f:92:01:9e:16:d8:03:86:d6:a8:d6:40:aa:e5:c0:9b:c3:c4Signer
Actual PE Digestd4:d9:8f:92:01:9e:16:d8:03:86:d6:a8:d6:40:aa:e5:c0:9b:c3:c4Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=YNK JAPAN Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=YNK JAPAN Inc,L=\ Nihonbashi Kodenmachou10-6,ST=Chuo-ku,C=JP03/10/2022, 12:52 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pec1 Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pec1 Size: 52KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE