Static task
static1
Behavioral task
behavioral1
Sample
07db57fa0831bf190246fc6ec58f6b6f3b19fa519405efa637fe5d4170c42f53.exe
Resource
win7-20220812-en
General
-
Target
07db57fa0831bf190246fc6ec58f6b6f3b19fa519405efa637fe5d4170c42f53.exe
-
Size
1.7MB
-
MD5
0b79c6003a0432d052484fc35a4ab3df
-
SHA1
480fdff8c8bc255aaca994526d9b4c8f452b9c1e
-
SHA256
07db57fa0831bf190246fc6ec58f6b6f3b19fa519405efa637fe5d4170c42f53
-
SHA512
55ef9a45747255bb4acc9241e163e497a50307e8b3ab46f54cca309a748081a9e852b5512915a670efdb4fd63168dcc00905d9f8cb03abe50d7c4f1be7c5656e
-
SSDEEP
24576:K7Um6HJhp9Db/Np0K7SJTI0oACUs3Ralcp0kMsTWxUZ:Kom6Hrp9H/N97QT5o1UmRkBxs
Malware Config
Signatures
Files
-
07db57fa0831bf190246fc6ec58f6b6f3b19fa519405efa637fe5d4170c42f53.exe.exe windows x64
Code Sign
68:aa:08:45:fd:86:76:8b:49:85:4d:38:c8:87:4c:ccCertificate
IssuerCN=HDD Toshiba SATA-III 10Tb HDWG460EZSTA N300 (7200rpm) 2048Mb 2.5 RtlNot Before22/10/2022, 18:03Not After23/10/2032, 18:03SubjectCN=HDD Toshiba SATA-III 10Tb HDWG460EZSTA N300 (7200rpm) 2048Mb 2.5 Rtl90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11/05/2022, 00:00Not After10/08/2033, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
4f:c6:f3:81:17:ef:56:a2:6b:81:5a:f4:02:b9:45:06:ec:59:a4:11:e1:39:19:62:9e:98:f5:a0:74:57:4e:81Signer
Actual PE Digest4f:c6:f3:81:17:ef:56:a2:6b:81:5a:f4:02:b9:45:06:ec:59:a4:11:e1:39:19:62:9e:98:f5:a0:74:57:4e:81Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=HDD Toshiba SATA-III 10Tb HDWG460EZSTA N300 (7200rpm) 2048Mb 2.5 Rtl04/11/2022, 15:41 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ