Static task
static1
Behavioral task
behavioral1
Sample
bf4958731ce63d98dcbfce4013178941fc7c15be4524230898ef485dd3bd928d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bf4958731ce63d98dcbfce4013178941fc7c15be4524230898ef485dd3bd928d.exe
Resource
win10v2004-20231215-en
General
-
Target
bf4958731ce63d98dcbfce4013178941fc7c15be4524230898ef485dd3bd928d
-
Size
11.1MB
-
MD5
6f114b661e1b8ac0f5d1bdce6a6eabbc
-
SHA1
eae8148de192227b64f3aaa992277c4305224f2c
-
SHA256
bf4958731ce63d98dcbfce4013178941fc7c15be4524230898ef485dd3bd928d
-
SHA512
0c103db0bdf1b0079d86bb0d4d117f43d955d167a1a7f9483f8b1cd9e12f567077aa133337f804d27a28cdf3323b708df8f69bb057bcd490be4f5b4685c11285
-
SSDEEP
196608:KjpIQHng6p1uo2SDROl1CjVMxOytv4PMt7lwYB1lXfb2bmCf4g/iQZA72YcQwzHT:IpPHnxp4o9FJCrZx7lwY3lXDCAgxg2YU
Malware Config
Signatures
Files
-
bf4958731ce63d98dcbfce4013178941fc7c15be4524230898ef485dd3bd928d.exe windows:4 windows x86 arch:x86
Code Sign
3a:45:8b:19:1e:ab:8b:59:b5:ca:b4:83:a3:08:64:97Certificate
IssuerCN=ReKa Technology Co.\, Ltd.,1.2.840.113549.1.9.1=#1300Not Before21/12/2023, 20:22Not After31/12/2039, 23:59SubjectCN=ReKa Technology Co.\, Ltd.,1.2.840.113549.1.9.1=#130030:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
13:d6:db:bb:15:6e:98:55:30:aa:29:42:a9:95:6a:e2:a6:94:a4:c0:04:16:40:1b:8a:32:63:9a:44:f9:72:06Signer
Actual PE Digest13:d6:db:bb:15:6e:98:55:30:aa:29:42:a9:95:6a:e2:a6:94:a4:c0:04:16:40:1b:8a:32:63:9a:44:f9:72:06Digest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11.0MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE