Static task
static1
Behavioral task
behavioral1
Sample
5372e09acc878c0cd342388c287d5d69b3626b47c19535501b297110d5545238.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5372e09acc878c0cd342388c287d5d69b3626b47c19535501b297110d5545238.exe
Resource
win10-20230220-en
General
-
Target
5372e09acc878c0cd342388c287d5d69b3626b47c19535501b297110d5545238
-
Size
665KB
-
MD5
0320bae3d56c8b8b7cfb635e8e13093e
-
SHA1
1dd5437e95c8fe8a89ef484e49b34ad0acf5d5a7
-
SHA256
5372e09acc878c0cd342388c287d5d69b3626b47c19535501b297110d5545238
-
SHA512
c91ee5b39c1ef4c955ddf9ddece0b44a0d7019cf3b9912283afedcdbb885b80b86db60b294a1bad0487fdf2b3e65eedac9045a5a58971d6222398e70d8af02e1
-
SSDEEP
12288:IeoO02CYFYANrarpv9j50hfobd022PMep+mSUtNVecV/fmb0IBxA:GMCoNrWv9wPMep+mSUtNw4/g
Malware Config
Signatures
Files
-
5372e09acc878c0cd342388c287d5d69b3626b47c19535501b297110d5545238.exe windows x64
Code Sign
61:90:55:89:95:8c:54:81:45:de:79:7d:56:2b:4a:deCertificate
IssuerCN=MSI Pulse GL76 12UEK-088XRU Intel Core i5 12500H/ 3.3 GHz - 4.5 GHz/ 16384 Mb/ 17.3 Full HD 1920x1080/ 512 Gb SSD/ DVD nVidia GeForce RTX 3070 6144 DOS (9S7-17L314-088)Not Before16-04-2023 21:20Not After17-04-2033 21:20SubjectCN=MSI Pulse GL76 12UEK-088XRU Intel Core i5 12500H/ 3.3 GHz - 4.5 GHz/ 16384 Mb/ 17.3 Full HD 1920x1080/ 512 Gb SSD/ DVD nVidia GeForce RTX 3070 6144 DOS (9S7-17L314-088)90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11-05-2022 00:00Not After10-08-2033 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c8:d7:f4:51:c2:cf:ad:09:b6:5d:a8:e0:a9:27:1a:4c:94:ca:f8:5f:ab:7a:0c:51:05:9d:3d:0c:30:94:cf:baSigner
Actual PE Digestc8:d7:f4:51:c2:cf:ad:09:b6:5d:a8:e0:a9:27:1a:4c:94:ca:f8:5f:ab:7a:0c:51:05:9d:3d:0c:30:94:cf:baDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=MSI Pulse GL76 12UEK-088XRU Intel Core i5 12500H/ 3.3 GHz - 4.5 GHz/ 16384 Mb/ 17.3 Full HD 1920x1080/ 512 Gb SSD/ DVD nVidia GeForce RTX 3070 6144 DOS (9S7-17L314-088)13-04-2023 18:12 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 531KB - Virtual size: 530KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ