Static task
static1
Behavioral task
behavioral1
Sample
8fb956c7a1ec6b593693c6448ed88f28fac18f5bf6ce5ac408247fe6e98ffd5c.exe
Resource
win7-20231215-en
General
-
Target
8fb956c7a1ec6b593693c6448ed88f28fac18f5bf6ce5ac408247fe6e98ffd5c
-
Size
2.3MB
-
MD5
e7d8696790c265bfe69a7ead491b1531
-
SHA1
318dd5fc1a4bebf8c25ecc423a72a07f715a15cd
-
SHA256
8fb956c7a1ec6b593693c6448ed88f28fac18f5bf6ce5ac408247fe6e98ffd5c
-
SHA512
dea3fe4811dd32150d20d8ae36c653345eac004ea43dea41466ef30c9e1a7858af25398bc970f41113c3020b1f40ca3cd588540dc59e21749eae9f8e2e5802b6
-
SSDEEP
49152:EnpKBUdqBwlAHlPQ3BpbZLK2lbzKXb/9WS9zAz:EpKmwOAHlgpbxfl+b9az
Malware Config
Signatures
Files
-
8fb956c7a1ec6b593693c6448ed88f28fac18f5bf6ce5ac408247fe6e98ffd5c.exe windows:4 windows x64 arch:x64
5dcfbbae0295b3f4d53d186b16210b4d
Code Sign
3b:2e:3b:db:e8:58:e7:8d:4f:d8:bc:08:0b:bc:81:afCertificate
IssuerCN=±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ªNot Before26/12/2023, 15:05Not After27/12/2033, 15:05SubjectCN=±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª±#™‰¦ª39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
51:83:9b:65:35:ac:e0:38:d2:45:c0:f0:f0:5f:e5:e8:f8:a5:74:cc:33:b2:d4:e4:f0:cf:d8:7c:e3:2d:36:53Signer
Actual PE Digest51:83:9b:65:35:ac:e0:38:d2:45:c0:f0:f0:5f:e5:e8:f8:a5:74:cc:33:b2:d4:e4:f0:cf:d8:7c:e3:2d:36:53Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutW
mscoree
_CorExeMain
advapi32
GetUserNameW
user32
WaitMessage
kernel32
GetModuleHandleA
Sections
Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE