Static task
static1
Behavioral task
behavioral1
Sample
a1a75a717953ccb8afbdba7f5dae113dba630c6c90820f927f41d28782ed483b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a1a75a717953ccb8afbdba7f5dae113dba630c6c90820f927f41d28782ed483b.exe
Resource
win10v2004-20231215-en
General
-
Target
a1a75a717953ccb8afbdba7f5dae113dba630c6c90820f927f41d28782ed483b
-
Size
6.3MB
-
MD5
4a4f67492c758b1b02984f0f767b73ae
-
SHA1
693c0ab10732f313f563d67146907f54e4935c3d
-
SHA256
a1a75a717953ccb8afbdba7f5dae113dba630c6c90820f927f41d28782ed483b
-
SHA512
2908cba458b21ea19181ffbfe91953d243e7f2b32410dc66f2b5ece7fb6e6e81c5df3112974269b2a54437199359d82784ccfd251e2969f0df8db86294dd9c86
-
SSDEEP
98304:DesN0L5nGC09I1dIWGiyY3ZxUdSxAQ5EEXZtvLj1/fwGNPfBKlSvZpNDZo4Vl:DeP5GC0u1iWGrUZdBfvP1nhPfsExbD/j
Malware Config
Signatures
Files
-
a1a75a717953ccb8afbdba7f5dae113dba630c6c90820f927f41d28782ed483b.exe windows:6 windows x86 arch:x86
54fe63abcd6309b685003636c1e6ef40
Code Sign
73:73:d2:f4:05:89:62:8c:49:50:e9:3c:c7:b6:c4:b3Certificate
IssuerCN=GNU (C) 1998-2022 Logitech. All rights reserved.Not Before02-01-2024 19:49Not After03-01-2034 19:49SubjectCN=GNU (C) 1998-2022 Logitech. All rights reserved.39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6a:da:00:ef:93:0a:de:bc:93:d1:97:ac:c7:a3:25:07:e1:0d:bd:09:df:50:35:b0:08:a3:ee:94:a1:2a:d0:6bSigner
Actual PE Digest6a:da:00:ef:93:0a:de:bc:93:d1:97:ac:c7:a3:25:07:e1:0d:bd:09:df:50:35:b0:08:a3:ee:94:a1:2a:d0:6bDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetClipboardData
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
advapi32
RegSetValueExA
shell32
ShellExecuteExW
ole32
CoTaskMemFree
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jar€@ Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jar€@ Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp·� Size: - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp·� Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp·� Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ