Static task
static1
Behavioral task
behavioral1
Sample
b208a815c90fb77fb52c0dc24e21c3b9a8ac2670c17c870100f90bf02b6770b7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b208a815c90fb77fb52c0dc24e21c3b9a8ac2670c17c870100f90bf02b6770b7.exe
Resource
win10-20230220-en
General
-
Target
b208a815c90fb77fb52c0dc24e21c3b9a8ac2670c17c870100f90bf02b6770b7
-
Size
504KB
-
MD5
b905a053391546e03e2a36a9f87012be
-
SHA1
cc11ff8488f93d88da263495c51b06fea7cffc0d
-
SHA256
b208a815c90fb77fb52c0dc24e21c3b9a8ac2670c17c870100f90bf02b6770b7
-
SHA512
4c63bd2e0f47aff3d493856e03c0eeeadf4b4cb5327ff6ae9db7007e78fe381d19871534c5439a81dcb62c6f63d804eb33a2baac80f1ee8e83a78a70be979583
-
SSDEEP
6144:rqZTai+t8IUBObzgLnsQ8dzfA3bKoAR87rTkTHUmKodAiBQK4DIu6HI+y1DmW4u8:G2UPL58oI873K0YdHRG6HAo6RSOw
Malware Config
Signatures
Files
-
b208a815c90fb77fb52c0dc24e21c3b9a8ac2670c17c870100f90bf02b6770b7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
3f:28:a1:25:cb:ff:1c:a2:40:27:bd:7f:91:bb:d0:88Certificate
IssuerCN=Hyundai HAC-12i/T-PRO (white)Not Before23/05/2023, 12:06Not After24/05/2033, 12:06SubjectCN=Hyundai HAC-12i/T-PRO (white)39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b4:e4:57:6c:da:c9:2f:e6:4f:f8:49:50:40:9d:91:54:da:b5:63:c7:46:a5:ff:e4:97:1c:c8:1c:35:0e:f9:b3Signer
Actual PE Digestb4:e4:57:6c:da:c9:2f:e6:4f:f8:49:50:40:9d:91:54:da:b5:63:c7:46:a5:ff:e4:97:1c:c8:1c:35:0e:f9:b3Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 377KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ