Static task
static1
Behavioral task
behavioral1
Sample
4fea427b2873969bc8b5dc51aa5fccd37bd4a517cff435072fb19e54921317fe.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
4fea427b2873969bc8b5dc51aa5fccd37bd4a517cff435072fb19e54921317fe.exe
Resource
win10-20230703-en
General
-
Target
4fea427b2873969bc8b5dc51aa5fccd37bd4a517cff435072fb19e54921317fe
-
Size
1.1MB
-
MD5
03d0ae067121c5fc020a2ca5496fc8d3
-
SHA1
75cfb937b7135da6590c8db1601931039b728637
-
SHA256
4fea427b2873969bc8b5dc51aa5fccd37bd4a517cff435072fb19e54921317fe
-
SHA512
486f28b226cf68fb602f7a81abd74d9f983eb2ffecb4ad6a86033a495ee9090a3c5311cfb45de9f4024282a29f35ccc3b45c5001dafe9bc896e990295ae8adae
-
SSDEEP
12288:WzDmXqzF8qEYMbZB1A37ddj0+GS4fU2tmi+q84FGfYZ4H2Z6rYfT89nT9vwMb44G:WWM+pYr0+AfNorq8xm8jrYUx9qROe1
Malware Config
Signatures
Files
-
4fea427b2873969bc8b5dc51aa5fccd37bd4a517cff435072fb19e54921317fe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
76:b9:1b:74:b2:0d:08:af:45:bf:a6:61:56:9c:7d:0dCertificate
IssuerCN=4Aces BlackJack BJ360 (R5-3600/16Gb/512Gb/HDD1Tb/RTX3050/Win Trial)Not Before06-07-2023 12:27Not After07-07-2033 12:27SubjectCN=4Aces BlackJack BJ360 (R5-3600/16Gb/512Gb/HDD1Tb/RTX3050/Win Trial)39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
62:9d:3e:06:53:7a:b6:da:c2:82:11:a1:f2:39:f4:79:c4:94:68:3d:20:ce:9f:5c:c0:68:9c:74:3e:72:c0:37Signer
Actual PE Digest62:9d:3e:06:53:7a:b6:da:c2:82:11:a1:f2:39:f4:79:c4:94:68:3d:20:ce:9f:5c:c0:68:9c:74:3e:72:c0:37Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 578KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ