Static task
static1
Behavioral task
behavioral1
Sample
8b73af9327de5484863ef86438218c43.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b73af9327de5484863ef86438218c43.exe
Resource
win10v2004-20231222-en
General
-
Target
8b73af9327de5484863ef86438218c43
-
Size
150KB
-
MD5
8b73af9327de5484863ef86438218c43
-
SHA1
1f6f9ffc0dd392dfad5c1366f40998779cd42c9a
-
SHA256
a416cd7da53f8f90531146c14eff9050882f2e040a245e54dc9248f74259a914
-
SHA512
d61e065191763ad47079e5b335dd5fe6f824a129d076015cf215adbb45a5e60cb1e752a0d77ddcdfcbe12284a9cdd64569ff85556ffb8fe8e2a58ee67a4b3c79
-
SSDEEP
3072:fakiPzKwZD0orDGD2NXvUuyEXVtaUFDoBQ6vw42:fy7JZwn2NctEFqN2
Malware Config
Signatures
Files
-
8b73af9327de5484863ef86438218c43.exe windows:4 windows x64 arch:x64
Code Sign
54:08:3a:34:9e:71:8b:92:4c:d9:dc:da:09:13:20:e5Certificate
IssuerCN=Microsoft WindowsNot Before19/05/2021, 18:24Not After31/12/2039, 23:59SubjectCN=Microsoft Windows07Certificate
IssuerCN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=USNot Before03/05/2011, 07:00Not After03/05/2031, 07:00SubjectCN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
0b:e6:3a:c9:92:ef:67:baCertificate
IssuerCN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=USNot Before09/09/2020, 07:00Not After09/09/2025, 07:00SubjectCN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
1d:8d:63:03:01:c9:ad:c9:ba:e3:c5:6c:b8:fa:28:fd:83:73:2c:baSigner
Actual PE Digest1d:8d:63:03:01:c9:ad:c9:ba:e3:c5:6c:b8:fa:28:fd:83:73:2c:baDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ