Static task
static1
General
-
Target
14f1b227518a5bc74cb3409c53080efed12e3a576585ce1f604fb0bfbfaa4787
-
Size
1.7MB
-
MD5
1ac75576f5e48d145f51a94a414ce8a1
-
SHA1
85aad9bb236e6a4b27ac8eb65b3d2554dbd10501
-
SHA256
14f1b227518a5bc74cb3409c53080efed12e3a576585ce1f604fb0bfbfaa4787
-
SHA512
56e702f816b642efa2586a140226ebf319d3ccf8744b4e2eb8e5744fdc1e821d81ee28a254bb6d586bdc85faf8ac5a311128faef7bf6c6411a2aae64f8f6a30b
-
SSDEEP
49152:EZwe+yhWvrBATk7d+tVXMiV6kqXjlm9fb3j3K:2L+yhWvrBAAd+TXM31XpmFz3K
Malware Config
Signatures
Files
-
14f1b227518a5bc74cb3409c53080efed12e3a576585ce1f604fb0bfbfaa4787.exe windows x64
f9ec2b9775830880f35f75af24ab4c71
Code Sign
14:8c:4d:07:25:70:b9:8d:4d:fa:d9:c3:f3:85:b5:21Certificate
IssuerCN=Acer Aspire C27-1655 DQ.BGHER.00SNot Before07-11-2022 14:39Not After08-11-2032 14:39SubjectCN=Acer Aspire C27-1655 DQ.BGHER.00S90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11-05-2022 00:00Not After10-08-2033 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
7b:96:48:6a:8d:26:3d:6a:1e:57:66:5c:31:c2:67:b0:92:eb:cb:27:d7:df:71:7a:33:57:aa:7b:9a:14:1f:ceSigner
Actual PE Digest7b:96:48:6a:8d:26:3d:6a:1e:57:66:5c:31:c2:67:b0:92:eb:cb:27:d7:df:71:7a:33:57:aa:7b:9a:14:1f:ceDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Acer Aspire C27-1655 DQ.BGHER.00S28-11-2022 11:52 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
advapi32
RegisterEventSourceA
user32
TranslateMessage
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE