Static task
static1
Behavioral task
behavioral1
Sample
c6d21e9f437de59c5b104028b6fbbfcd181450692b5d4f56b5fd9486d21ed3be.exe
Resource
win7-20220812-en
General
-
Target
c6d21e9f437de59c5b104028b6fbbfcd181450692b5d4f56b5fd9486d21ed3be
-
Size
99KB
-
MD5
e32ff8ad160e0743e38b37d317115c4f
-
SHA1
87ea7cc74cb757d0d48b7e2f79b86ee7eab3753c
-
SHA256
c6d21e9f437de59c5b104028b6fbbfcd181450692b5d4f56b5fd9486d21ed3be
-
SHA512
064232446d68640a087e283016e7fb7225d6e0c9961fd239858464bfbd47daf9f6293e28ac9ebde27f1cd6abf8e02d67462206bba3e5e6e973d841c6ec043a7d
-
SSDEEP
1536:jYFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prrgx6pehE1RIC+Vifyu:jKS4jHS8q/3nTzePCwNUh4E9rpey1RC4
Malware Config
Signatures
Files
-
c6d21e9f437de59c5b104028b6fbbfcd181450692b5d4f56b5fd9486d21ed3be.exe windows x86
Code Sign
01:1eCertificate
IssuerCN=DriverDevelop.com CA,OU=DriverDevelop.com CA,O=DriverDevelop.com,L=BeiJing,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6dNot Before15/08/2009, 03:02Not After13/08/2019, 03:02SubjectCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d04:00:00:00:00:01:20:19:c1:90:66Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18/03/2009, 11:00Not After28/01/2028, 12:00SubjectCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
01:00:00:00:00:01:25:b0:b4:cc:01Certificate
IssuerCN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSignNot Before21/12/2009, 09:32Not After22/12/2020, 09:32SubjectCN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BEExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
61:0b:7f:6b:00:00:00:00:00:19Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23/05/2006, 17:00Not After23/05/2016, 17:10SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
2a:e0:88:09:2d:5b:8c:86:82:a4:cf:0d:1a:f9:bd:a4:a2:2a:cd:d7Signer
Actual PE Digest2a:e0:88:09:2d:5b:8c:86:82:a4:cf:0d:1a:f9:bd:a4:a2:2a:cd:d7Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d22/07/2012, 08:28 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE