Static task
static1
Behavioral task
behavioral1
Sample
7cbf389b3d3d7d0ac4fb9d1652c9b427.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7cbf389b3d3d7d0ac4fb9d1652c9b427.exe
Resource
win10v2004-20230220-en
General
-
Target
7cbf389b3d3d7d0ac4fb9d1652c9b427.exe
-
Size
1.3MB
-
MD5
7cbf389b3d3d7d0ac4fb9d1652c9b427
-
SHA1
f8db12a3fd8fc5d02c7e56bc727d5411702852c6
-
SHA256
938deb1fb95c5990b581fd5b988f8d5a980d0f4a117cc6957012602f0196987d
-
SHA512
739c6ba8901708204a913f55a4d636c933ac9ef73af166d331f8db77f2b1b53430cd19b4f3a85cc2718d64b37ceb4bde14f5e31144749ef45b918ae22d22063d
-
SSDEEP
24576:IuTS4zbdAINM/2OLEJMVrxe+jRhWI7azyoQTz/fBU2Qt7XJjvo:/zBAmM/TAJM9vjvWp7QTr5U2+Vjvo
Malware Config
Signatures
Files
-
7cbf389b3d3d7d0ac4fb9d1652c9b427.exe.exe windows x86
90aa300f8b98c30a131430c7f96d8b4f
Code Sign
06:a1:3a:55:e1:54:39:ed:2a:1a:49:79:0d:4a:72:89Certificate
IssuerCN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1,O=DigiCert\, Inc.,C=USNot Before22-12-2022 00:00Not After04-01-2024 23:59SubjectCN=*.estreet.com7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23-12-2017 00:00Not After22-03-2029 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
3c:d3:7d:ef:73:50:da:ff:c6:13:8a:a1:b9:de:89:41:2f:fd:a6:41:98:7f:1b:61:11:15:3f:f6:a3:fa:fe:77Signer
Actual PE Digest3c:d3:7d:ef:73:50:da:ff:c6:13:8a:a1:b9:de:89:41:2f:fd:a6:41:98:7f:1b:61:11:15:3f:f6:a3:fa:fe:77Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=*.estreet.com18-02-2023 17:29 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
SetLastError
lstrlenW
GetSystemDefaultUILanguage
GetLargePageMinimum
lstrlenA
GetModuleHandleA
GetSystemDefaultLangID
IsValidCodePage
GetThreadUILanguage
LoadLibraryA
DeleteFileA
GetProcAddress
GetProcessHeap
GetEnvironmentStringsW
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
HeapSize
HeapReAlloc
DecodePointer
user32
LoadStringA
IsWindow
GetMessageExtraInfo
GetMessageTime
IsWow64Message
GetWindowTextLengthA
AnyPopup
OpenIcon
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ