Static task
static1
Behavioral task
behavioral1
Sample
a568121c4b1c4b36b77ef499167b265f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a568121c4b1c4b36b77ef499167b265f.exe
Resource
win10v2004-20230220-en
General
-
Target
a568121c4b1c4b36b77ef499167b265f.exe
-
Size
1.4MB
-
MD5
a568121c4b1c4b36b77ef499167b265f
-
SHA1
92af7c91cedcdcd39b3ae2c8a2430b4789f3a90e
-
SHA256
a44ee9b6798df416a1186c178f7aa03c29bc912792cfab520f35486be3afd6bc
-
SHA512
dc73d4437a34f05178c3b28f80247d6d77e5171c60b554b626c09fb2c49b0e379f7f60b2d057e13027836d4cc605344f89988881737a5f39949205809f896bef
-
SSDEEP
24576:4tj4/Bk1qWa5ypygsQks5KkemsHikXWvSOcOxVjKX4oSpckFmgiddd+ADb:4tj4/BAqWVtnks5KkemINXWvSlOxQX4G
Malware Config
Signatures
Files
-
a568121c4b1c4b36b77ef499167b265f.exe.exe windows x86
a394fd24086764b2c7329e0b90e404c6
Code Sign
04:49:5a:aa:bc:cd:27:c6:82:c4:96:50:0d:60:08:d6:44:c1Certificate
IssuerCN=R3,O=Let's Encrypt,C=USNot Before08-04-2023 21:03Not After07-07-2023 21:03SubjectCN=www.zachblas.info7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23-12-2017 00:00Not After22-03-2029 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
a4:72:00:32:a1:46:9c:28:e6:bd:9d:ff:f6:0e:fa:1f:cf:28:cb:1f:d7:95:1b:55:57:d1:a0:47:29:30:0a:55Signer
Actual PE Digesta4:72:00:32:a1:46:9c:28:e6:bd:9d:ff:f6:0e:fa:1f:cf:28:cb:1f:d7:95:1b:55:57:d1:a0:47:29:30:0a:55Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=www.zachblas.info23-04-2023 09:37 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLCID
EnterCriticalSection
GetFullPathNameW
lstrlenW
lstrlenA
LocalAlloc
GetSystemDefaultLangID
IsValidCodePage
GetTickCount64
GetCurrentDirectoryW
GetProcAddress
LCMapStringW
GlobalMemoryStatusEx
GetModuleHandleW
GetFileType
GetTickCount
CloseHandle
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
WriteConsoleW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetLastError
SetLastError
EncodePointer
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
CreateFileW
user32
EndPaint
OpenIcon
GetMenu
GetFocus
TrackPopupMenu
GetSubMenu
GetDoubleClickTime
GetUpdateRect
IsWow64Message
GetWindowDC
IsZoomed
GetWindowTextLengthA
GetParent
ole32
OleUninitialize
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 643KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ