Static task
static1
Behavioral task
behavioral1
Sample
2certificates_rootCA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2certificates_rootCA.exe
Resource
win10v2004-20221111-en
General
-
Target
2certificates_rootCA
-
Size
13KB
-
MD5
4e43623f2e9a31e39b62bc002b2223e9
-
SHA1
4dfdf3fa7fac564e82764bef73c6632d8656cb69
-
SHA256
a1a8e73ff09d5b55a6156e68c56b5cbf80cc4b9957f02e6c52136654956e334d
-
SHA512
db9e749bf79fd45ab2c1787736ff7a6538e692ca98648c4225f71e67e2e72021b7eaa2d57729541add3b4cfb719394b752e0442f65a8bf6a32195a8fb3a29ce5
-
SSDEEP
192:RY/TDrNHcHT7+hmLYiax1TBe8LBef41Vw25GRxfI:K/TD58zyKYpDNefD2EHfI
Malware Config
Signatures
Files
-
2certificates_rootCA.exe windows x64
e0b5f016deb2de009b95cfe95b3f13b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetConsoleScreenBufferInfo
GetStdHandle
WriteConsoleA
GetConsoleCursorInfo
lstrlenA
WaitForSingleObject
ExitThread
Sleep
SetConsoleCursorInfo
CreateThread
FlushConsoleInputBuffer
ExitProcess
GetConsoleWindow
SetConsoleCursorPosition
user32
MessageBoxA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 656B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ