Static task
static1
Behavioral task
behavioral1
Sample
56bd7934f080701e491c79a5513dbec93f0996b7737a8c9b63218451020d37a3.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
56bd7934f080701e491c79a5513dbec93f0996b7737a8c9b63218451020d37a3.exe
Resource
win10v2004-20230621-en
General
-
Target
08b2bd22e0a34207641dba6d7.bin
-
Size
1.1MB
-
MD5
33bcf1102350bd55ce71fdd0fde83098
-
SHA1
f5dffacc468a8c8185c2f54407cfb1c62a542ef6
-
SHA256
538e3c15b5bd0a1590d38fe737feda9a1e5b261943164ce902cc3f1f2d2e1aaf
-
SHA512
86b64c3fb0376e83396fc734629e9cbac30e7f0c6715fd7744c6453a7deea7ca958fd0a4f9ba19a8cb956cf097d18a0a25fd0bfcc0a204247ffb316c1dc321f3
-
SSDEEP
24576:kmnScQ2NPuXxW5pqSTC+erP4mXytHuh4X+KTdASklQOxqRhNIY6ubCz6L:kSPdWhWLnpuWuSqQOYVIxuN
Malware Config
Signatures
Files
-
08b2bd22e0a34207641dba6d7.bin.zip
Password: infected
-
56bd7934f080701e491c79a5513dbec93f0996b7737a8c9b63218451020d37a3.exe.exe windows x64
Code Sign
1f:b8:fb:34:1b:ad:b8:8a:42:98:d8:3e:97:c5:85:21Certificate
IssuerCN=SSD Western Digital Blue SA510 1 ТБ SATA (WDS100T3B0A)Not Before28/05/2023, 12:56Not After29/05/2033, 12:56SubjectCN=SSD Western Digital Blue SA510 1 ТБ SATA (WDS100T3B0A)39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1d:43:5f:46:34:26:dd:25:da:9b:3c:d9:f4:f6:c2:7e:54:2c:4f:0b:9c:86:18:bf:7b:29:d4:49:d5:7d:95:7aSigner
Actual PE Digest1d:43:5f:46:34:26:dd:25:da:9b:3c:d9:f4:f6:c2:7e:54:2c:4f:0b:9c:86:18:bf:7b:29:d4:49:d5:7d:95:7aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ