Static task
static1
Behavioral task
behavioral1
Sample
test.exe
Resource
win7-20230621-en
General
-
Target
test.exe
-
Size
1.1MB
-
MD5
70e9acc22074469191061984d99e7e75
-
SHA1
1ade008ec69e16f792f8dd322f03c9c0a9631d9c
-
SHA256
4dc9405922a06a27bdf9c0b641763f8db7f7f9ccfa58088c17efff8143a247b7
-
SHA512
c1217b98ce9b9ad4154afc896eaddb8d8efd12f9faafbe247bc610836c8cc8304f7bc2f44146a72100f77abf1ce90cca746443552178a06c559ba8005ad4f6ef
-
SSDEEP
12288:ARU8+e5iPFfe94tlTt5KtJlkVQ/KYY7e7YbsRLGX+zHKfyqjZerOJhxngDhqBozO:aGtP84tpylJCYY7e7w+zHKfXIOmcwf4
Malware Config
Signatures
Files
-
test.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
1d:20:bc:31:4b:1c:f5:b5:4e:c5:46:2b:80:fa:e5:42Certificate
IssuerCN=BenQ Zowie XL2411KNot Before12/04/2021, 15:35Not After13/04/2031, 15:35SubjectCN=BenQ Zowie XL2411K8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23/10/2020, 00:00Not After22/01/2032, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b4:9d:14:4c:d7:30:a6:1c:58:88:ef:d7:dd:a1:f6:03:8b:26:19:45:e4:61:e3:5f:9d:56:a9:2e:5b:50:3f:37Signer
Actual PE Digestb4:9d:14:4c:d7:30:a6:1c:58:88:ef:d7:dd:a1:f6:03:8b:26:19:45:e4:61:e3:5f:9d:56:a9:2e:5b:50:3f:37Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 477KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 623KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ