Static task
static1
Behavioral task
behavioral1
Sample
1EB8267A63AECA1239542BA8747C5C5F.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1EB8267A63AECA1239542BA8747C5C5F.exe
Resource
win10v2004-20220901-en
General
-
Target
1EB8267A63AECA1239542BA8747C5C5F.zip
-
Size
6.6MB
-
MD5
4cc90c482376b4aad9b1a56a8247ea8e
-
SHA1
424c3f4b96537884ac6209f572f2a4345a1b2af5
-
SHA256
710376e8d36c1e97c7df6849aacc5961368ce7eeec3b8a1c48b405cdbf1e4140
-
SHA512
931b408ebacf37085cb46cc852cb95bc21aa3af7de83be9707b1eaec76d23c14677d9fda7fd29c6b9ebea456f2db5aac8034654bcd8fca6dd04a274012c65fc1
-
SSDEEP
196608:CZeve05P8S7DCDZNV5e9rcijWUI7DW1qHX3NI:oyeCPdWZNV5MAR7DMqHHNI
Malware Config
Signatures
Files
-
1EB8267A63AECA1239542BA8747C5C5F.zip.zip
-
1EB8267A63AECA1239542BA8747C5C5F.bin.exe windows x86
dbfedc155114e93b03253d2457becdac
Code Sign
69:c0:36:9f:f4:ae:b5:95:4d:de:b3:c2:8e:89:fd:16Certificate
IssuerCN=Sony SEL-55210 45-270mm F5.2-6.3 medium-softNot Before22/10/2022, 12:35Not After23/10/2032, 12:35SubjectCN=Sony SEL-55210 45-270mm F5.2-6.3 medium-soft90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11/05/2022, 00:00Not After10/08/2033, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
e9:4a:ff:d9:c6:7c:20:b6:41:12:7f:45:12:b3:ec:c4:7a:9e:7a:f9:e4:c6:92:4c:65:9b:05:02:c9:50:ef:38Signer
Actual PE Digeste9:4a:ff:d9:c6:7c:20:b6:41:12:7f:45:12:b3:ec:c4:7a:9e:7a:f9:e4:c6:92:4c:65:9b:05:02:c9:50:ef:38Digest Algorithmsha256PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Sony SEL-55210 45-270mm F5.2-6.3 medium-soft28/10/2022, 15:06 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Sections
.text Size: - Virtual size: 989B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 678B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ