Static task
static1
Behavioral task
behavioral1
Sample
77cb8058b8e7e842f687a8e7ba24142182aa7cf4b5550f193ef4e34d3fc91ecd.exe
Resource
win7-20230220-en
General
-
Target
77cb8058b8e7e842f687a8e7ba24142182aa7cf4b5550f193ef4e34d3fc91ecd
-
Size
1.3MB
-
MD5
3fb45ca523c4a1ad3596f027a54a77e9
-
SHA1
1a75f27c504852e15b35850c1f875c98f8c5da3f
-
SHA256
77cb8058b8e7e842f687a8e7ba24142182aa7cf4b5550f193ef4e34d3fc91ecd
-
SHA512
f3be85f9aa0c891e5bcdba786b1f339b9245d843a29ad045fc3bd10a8c69baf1d17da7c325faef21321863a6ffb60e9c0ec9e852b6b29757bd609d58678f0a3b
-
SSDEEP
24576:y3rYzDknftrtL3g4npjWCVzf1aI4F7RzSezkBqzoCVXSKQd5p/ySC:8UmrtkCVBJ4PStBgxN8pqSC
Malware Config
Signatures
Files
-
77cb8058b8e7e842f687a8e7ba24142182aa7cf4b5550f193ef4e34d3fc91ecd.exe windows x86
baa93d47220682c04d92f7797d9224ce
Code Sign
02:6e:6c:75:6c:a2:83:b7:46:6b:c7:ba:6b:e2:be:c9Certificate
IssuerCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#1300Not Before27/11/2021, 05:19Not After31/12/2023, 16:00SubjectCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#130002:6e:6c:75:6c:a2:83:b7:46:6b:c7:ba:6b:e2:be:c9Certificate
IssuerCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#1300Not Before27/11/2021, 05:19Not After31/12/2023, 16:00SubjectCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#1300ab:d0:79:ec:80:f1:b5:40:ac:63:d2:d1:6b:c7:d6:77:a4:24:26:6e:e1:b1:46:b1:ec:fb:f5:77:1e:fb:c5:43Signer
Actual PE Digestab:d0:79:ec:80:f1:b5:40:ac:63:d2:d1:6b:c7:d6:77:a4:24:26:6e:e1:b1:46:b1:ec:fb:f5:77:1e:fb:c5:43Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#130013/04/2023, 18:12 Valid: false
d4:df:6e:78:9e:bb:f6:a8:97:6e:a9:f6:27:a2:86:62:fc:4d:0a:b1Signer
Actual PE Digestd4:df:6e:78:9e:bb:f6:a8:97:6e:a9:f6:27:a2:86:62:fc:4d:0a:b1Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=NVIDIA Corporation,ST=Hubei,C=China,1.2.840.113549.1.9.1=#130013/04/2023, 18:12 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
foywbwwp Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jwapwtuy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE