Static task
static1
Behavioral task
behavioral1
Sample
a4f9b63380601fe54a8e6f9621a335b6dcfc4a86727e95f8afc1e62d1951bc0c.exe
Resource
win7-20221111-en
General
-
Target
a4f9b63380601fe54a8e6f9621a335b6dcfc4a86727e95f8afc1e62d1951bc0c
-
Size
98KB
-
MD5
a391bc7486cdd79d645522eed5b045ec
-
SHA1
90aa6dbe92ba16b6a1c3f284ab372b118c9e1f76
-
SHA256
a4f9b63380601fe54a8e6f9621a335b6dcfc4a86727e95f8afc1e62d1951bc0c
-
SHA512
f8f1c0eb67cb85ebd94dae88bf15954b9bcc803a5f5f7d71ce7f723219b49a115839ce0baf070baa2af9333e0e6867fa265e88e1ac042f384eaff94d61752466
-
SSDEEP
1536:CkFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prVBUyrgt:CWS4jHS8q/3nTzePCwNUh4E9VBrC
Malware Config
Signatures
Files
-
a4f9b63380601fe54a8e6f9621a335b6dcfc4a86727e95f8afc1e62d1951bc0c.exe windows x86
Code Sign
01:1eCertificate
IssuerCN=DriverDevelop.com CA,OU=DriverDevelop.com CA,O=DriverDevelop.com,L=BeiJing,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6dNot Before15/08/2009, 03:02Not After13/08/2019, 03:02SubjectCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before01/05/2012, 00:00Not After31/12/2012, 23:59SubjectCN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
61:0c:12:06:00:00:00:00:00:1bCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23/05/2006, 17:01Not After23/05/2016, 17:11SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:31:de:c9:b3:aa:c4:b1:ed:52:e8:41:97:f7:ca:ef:4b:ca:12:beSigner
Actual PE Digest6a:31:de:c9:b3:aa:c4:b1:ed:52:e8:41:97:f7:ca:ef:4b:ca:12:beDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=DriverDevelop.com Signtools Test cert,OU=Dept. CodeSign CA,O=DriverDevelop.com,ST=BeiJing,C=CN,1.2.840.113549.1.9.1=#0c0c6361407a6e6465762e636f6d09/07/2012, 10:48 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE