Static task
static1
Behavioral task
behavioral1
Sample
47b9539dd6a15ad82e29508575c1a43e3c4289d74e8471b5154919f93627d112.exe
Resource
win10v2004-20221111-en
General
-
Target
47b9539dd6a15ad82e29508575c1a43e3c4289d74e8471b5154919f93627d112
-
Size
1.3MB
-
MD5
6764b2f15672781fba59a7cf7db9d273
-
SHA1
07f2f7e0a47e897e677155a5b09cb8d902fd3ec4
-
SHA256
47b9539dd6a15ad82e29508575c1a43e3c4289d74e8471b5154919f93627d112
-
SHA512
98d0a7fac907be2c04b78221c1ff849f70f9ccb106888e532751b29bca4a242ea459730f2fc908b732d44aaed7e8513b2a96dbc62962b576226419bcc293334c
-
SSDEEP
24576:po1Vu35TM6UL86X+1yxjP8oOAhgTAl7MgXLV:po1sGX86X0ujEowWQgXLV
Malware Config
Signatures
Files
-
47b9539dd6a15ad82e29508575c1a43e3c4289d74e8471b5154919f93627d112.exe windows x86
c87c269684dd62d98968492b86dd710d
Code Sign
d5:58:5c:97:96:d4:76:33:09:64:d3:10:da:cb:eb:00Certificate
IssuerCN=GTS CA 1D4,O=Google Trust Services LLC,C=USNot Before28-10-2022 15:45Not After26-01-2023 15:45SubjectCN=material.io7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23-12-2017 00:00Not After22-03-2029 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
71:a1:99:25:cd:07:36:ce:ed:2f:fa:ab:f7:19:66:78:1f:92:13:ce:e6:80:ab:64:62:0c:f3:b4:8d:71:f8:32Signer
Actual PE Digest71:a1:99:25:cd:07:36:ce:ed:2f:fa:ab:f7:19:66:78:1f:92:13:ce:e6:80:ab:64:62:0c:f3:b4:8d:71:f8:32Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=material.io18-11-2022 17:35 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetLastError
GetProcAddress
CloseHandle
WriteConsoleW
SetFilePointer
CreateFileW
ReadFile
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
Sleep
GlobalAlloc
LoadLibraryW
GetProcessHeap
GetCurrentThread
DeleteCriticalSection
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
EncodePointer
DecodePointer
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThreadId
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetStringTypeW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
user32
GetWindowRect
GetDC
SetDlgItemInt
GetDlgItem
SendDlgItemMessageW
GetSysColor
SetWindowPos
LoadStringW
CheckDlgButton
LoadBitmapW
SendMessageW
MapWindowPoints
SetDlgItemTextA
gdi32
GetPixel
DeleteObject
comctl32
ImageList_Add
ImageList_Create
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ