Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20230220-en
General
-
Target
5b252eb0df6b2ec35f1b812d777f7f54.bin
-
Size
598KB
-
MD5
99b06fd4605bcbdb098ebe1874000eac
-
SHA1
b5822b40188009dd847bb87f30e40e1f1e4c7009
-
SHA256
6bcd9bda719be3216334fb99d2235a4d332cbd4d1735257faa8eed6675062507
-
SHA512
0d86c9e04881589d73222b68817f0e0149affc488a87748ea2ea0031558002b473874377cd82e61a0ba585d043c669d048f52fa260e59b7b0dde5b5766407ad1
-
SSDEEP
12288:1wfv0nXjA5ZxfwL9yRSe3PyX1vQpApjUhff1GUO1g/9fkoo6+:kv0zeQ9YSeI1vQpApQUUCgPo7
Malware Config
Signatures
Files
-
5b252eb0df6b2ec35f1b812d777f7f54.bin.zip
Password: infected
-
c80fefaee5a61a93a89c869f69cd4ad540442e4c6b7f801473eeae54f72e3c7a.zip.zip
Password: infected
-
1.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
28:10:3c:6e:80:8f:d3:aa:48:b2:2e:f8:c8:bb:03:98Certificate
IssuerCN=Bosch SPV2HKX41E Ultra compactNot Before07/06/2023, 10:16Not After08/06/2033, 10:16SubjectCN=Bosch SPV2HKX41E Ultra compact39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c6:80:8c:ff:f7:f3:ba:93:a6:3b:ce:56:19:75:8f:57:75:5e:c5:2c:5b:1c:12:cc:3d:7d:46:72:df:ee:a5:e1Signer
Actual PE Digestc6:80:8c:ff:f7:f3:ba:93:a6:3b:ce:56:19:75:8f:57:75:5e:c5:2c:5b:1c:12:cc:3d:7d:46:72:df:ee:a5:e1Digest Algorithmsha256PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ