Static task
static1
Behavioral task
behavioral1
Sample
Договор на оказании услуг № 118 от 4 сентября 2023 года.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Договор на оказании услуг № 118 от 4 сентября 2023 года.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
Образец.docx
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Образец.docx
Resource
win10v2004-20230831-en
General
-
Target
JC_0b75f86bd7c01f5273a67caa8d0fae6ddba35a6d51d041e51586dec3b1c46c74
-
Size
134KB
-
MD5
3ba8dd93d17ddd1e317616ad826e024f
-
SHA1
854e2b2b77a9f6d9bd466c0a2d91bf38c8b484a1
-
SHA256
0b75f86bd7c01f5273a67caa8d0fae6ddba35a6d51d041e51586dec3b1c46c74
-
SHA512
94c357225c0de5f4a58c22a98e20bbeb0723ed903de0fb895f962ae029945ca1c2ed904a1460739c3c2e85cb7df8744d4b3454a3527db967a5c1724d29006f7f
-
SSDEEP
3072:htCTqDQ0L73P6j3VbcyzWfsM9FQrunzn2/GZm6mEAr0Nv/APzktoccQ:+YQY7fo17zWfsM9FQruzn2/Gm6Zw0NXY
Malware Config
Signatures
Files
-
JC_0b75f86bd7c01f5273a67caa8d0fae6ddba35a6d51d041e51586dec3b1c46c74.zip
-
Договор на оказании услуг № 118 от 4 сентября 2023 года.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
5c:05:e5:8a:c4:f7:4c:af:40:36:56:db:2a:e7:1a:d8Certificate
IssuerCN=DogovorNot Before04-09-2023 12:35Not After05-09-2033 12:35SubjectCN=Dogovor0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
5c:05:e5:8a:c4:f7:4c:af:40:36:56:db:2a:e7:1a:d8Certificate
IssuerCN=DogovorNot Before04-09-2023 12:35Not After05-09-2033 12:35SubjectCN=Dogovor05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d1:df:78:4b:78:f2:1a:d1:3a:ea:a1:4f:ac:29:c7:f7:1e:de:a6:63:67:fd:5e:3c:2a:bf:c2:91:df:5c:24:e8Signer
Actual PE Digestd1:df:78:4b:78:f2:1a:d1:3a:ea:a1:4f:ac:29:c7:f7:1e:de:a6:63:67:fd:5e:3c:2a:bf:c2:91:df:5c:24:e8Digest Algorithmsha256PE Digest Matchestrue84:ac:8b:0f:fb:80:0b:a6:d8:16:4c:91:2c:7c:e2:6a:c4:41:ab:1dSigner
Actual PE Digest84:ac:8b:0f:fb:80:0b:a6:d8:16:4c:91:2c:7c:e2:6a:c4:41:ab:1dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Образец.docx.docx office2007