Static task
static1
Behavioral task
behavioral1
Sample
856fe514b85a88d68dd882f163be2e72f7e19da9a9e182a90b241807e04bc9a4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
856fe514b85a88d68dd882f163be2e72f7e19da9a9e182a90b241807e04bc9a4.exe
Resource
win10v2004-20230915-en
General
-
Target
856fe514b85a88d68dd882f163be2e72f7e19da9a9e182a90b241807e04bc9a4
-
Size
4.9MB
-
MD5
dce7f54b4796eca6552eeb5867d491e9
-
SHA1
e8b798275508112d57896c704ccc945afbcb43af
-
SHA256
856fe514b85a88d68dd882f163be2e72f7e19da9a9e182a90b241807e04bc9a4
-
SHA512
24869e6688843b2beaa1f99b54ca6492f462f0f5252921eb2c225595bf83f91e570c38d05c05b01cf0722e830dfa3178f96b0f6801937d28ff5930ea3cc0162f
-
SSDEEP
98304:ac7dHBFC0fng0BM0wo2we7nVa7c4L2nQIjqBH3c1o0E4tEYIdKQdBwqmrr+:1dHg0iRoReqIQHYtTIdKrqm3+
Malware Config
Signatures
Files
-
856fe514b85a88d68dd882f163be2e72f7e19da9a9e182a90b241807e04bc9a4.exe windows:6 windows x86
83d577c6f8a16a82fe886c1a742b6bd9
Code Sign
01Certificate
IssuerCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Washington,ST=Redmond,C=USNot Before26/05/2023, 10:12Not After25/05/2024, 10:12SubjectCN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Washington,ST=Redmond,C=US0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21/09/2022, 00:00Not After21/11/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
df:b1:53:35:fc:d0:1c:2f:60:1b:79:0e:bb:94:5d:fc:3b:e4:19:02:20:1d:3d:46:57:ce:a2:20:95:36:ff:d8Signer
Actual PE Digestdf:b1:53:35:fc:d0:1c:2f:60:1b:79:0e:bb:94:5d:fc:3b:e4:19:02:20:1d:3d:46:57:ce:a2:20:95:36:ff:d8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
WriteFile
WaitForSingleObject
CreateFileW
FreeResource
LockResource
CloseHandle
LoadResource
FindResourceW
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
shell32
ShellExecuteExA
msvcp140
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
vcruntime140
__CxxFrameHandler3
_except_handler4_common
__std_terminate
memset
api-ms-win-crt-runtime-l1-1-0
_c_exit
_initialize_onexit_table
_cexit
_crt_atexit
_controlfp_s
terminate
_initterm_e
_register_thread_local_exe_atexit_callback
_seh_filter_exe
__p___argv
_register_onexit_function
_set_app_type
_exit
exit
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ