Static task
static1
General
-
Target
VoicemodDesktop.exe
-
Size
503.7MB
-
MD5
fee301908e11f9dc9df114ebaf086282
-
SHA1
bf212c53551fb7f602335e7984691851f5aff5d5
-
SHA256
406a227308327ebf7848e1eebcf0ac7b57b4cef08d5a4386a037f845ad04c126
-
SHA512
446e9f7752a86b6e5d3bc5ba35b8dcd11906e58a4d2e97f34c0a1e815493d0b11663622c05f5111789dd8ac04f54a8ba0462e8130a139e28f5ec387170183da7
-
SSDEEP
98304:lrS2uQhVlkrwtI7WsbTrlshYMux6yAjiqi5R4GWCXwQtaZQW5KF:lrS23/HyVPpshYKBER4GvgGa35q
Malware Config
Signatures
Files
-
VoicemodDesktop.exe.exe windows x86
54f97145ccdcbc2e31f50113957801d6
Code Sign
3b:ed:94:04:10:5d:d6:b4:47:88:1b:8b:d9:aa:ff:8dCertificate
IssuerCN=Acer Lite Ultra AN527-57 [AN527-75-77M3]Not Before13-03-2023 18:34Not After14-03-2033 18:34SubjectCN=Acer Lite Ultra AN527-57 [AN527-75-77M3]90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11-05-2022 00:00Not After10-08-2033 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3b:d3:43:ea:dd:26:3f:92:d0:6f:3c:33:21:dd:3a:1e:8a:46:c3:ff:12:6e:dd:5d:b9:e6:6c:97:1b:d1:a1:c8Signer
Actual PE Digest3b:d3:43:ea:dd:26:3f:92:d0:6f:3c:33:21:dd:3a:1e:8a:46:c3:ff:12:6e:dd:5d:b9:e6:6c:97:1b:d1:a1:c8Digest Algorithmsha256PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Acer Lite Ultra AN527-57 [AN527-75-77M3]16-03-2023 15:39 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameW
user32
EnumDisplayDevicesA
gdi32
BitBlt
Sections
.MPRESS1 Size: 4.2MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE