Static task
static1
Behavioral task
behavioral1
Sample
a4a04b24271ea6d129c1435b14ca10865d7670d799f045845423376fd3c69329.exe
Resource
win7-20220812-en
General
-
Target
a4a04b24271ea6d129c1435b14ca10865d7670d799f045845423376fd3c69329
-
Size
98KB
-
MD5
7d38de1f302aefb20b6fc13e61a4e1e9
-
SHA1
a2a45a1faeaadcb41fea6cf30623bbaacc0e29b3
-
SHA256
a4a04b24271ea6d129c1435b14ca10865d7670d799f045845423376fd3c69329
-
SHA512
86eea7be7068cc5e856adf84244bd343c4186a62ee163b76c483399d2a43e6588f0bd1f35e8a7683776d035e64e271f836de02b7b317fde81c12b7e92c438ced
-
SSDEEP
1536:CkFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prVBUyrgN:CWS4jHS8q/3nTzePCwNUh4E9VBrC
Malware Config
Signatures
Files
-
a4a04b24271ea6d129c1435b14ca10865d7670d799f045845423376fd3c69329.exe windows x86
Code Sign
01:1eCertificate
IssuerCN=DriverDevelop.com CA,OU=DriverDevelop.com CA,O=DriverDevelop.com,L=BeiJing,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6dNot Before15/08/2009, 03:02Not After13/08/2019, 03:02SubjectCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before01/05/2012, 00:00Not After31/12/2012, 23:59SubjectCN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
61:0c:12:06:00:00:00:00:00:1bCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23/05/2006, 17:01Not After23/05/2016, 17:11SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:31:de:c9:b3:aa:c4:b1:ed:52:e8:41:97:f7:ca:ef:4b:ca:12:beSigner
Actual PE Digest6a:31:de:c9:b3:aa:c4:b1:ed:52:e8:41:97:f7:ca:ef:4b:ca:12:beDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d09/07/2012, 10:48 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE