Static task
static1
Behavioral task
behavioral1
Sample
567ec3acd9476e275db49721f6907c612f2c21db9b451c950b1bcd00d0f39baa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
567ec3acd9476e275db49721f6907c612f2c21db9b451c950b1bcd00d0f39baa.exe
Resource
win10v2004-20240226-en
General
-
Target
567ec3acd9476e275db49721f6907c612f2c21db9b451c950b1bcd00d0f39baa
-
Size
11KB
-
MD5
bb0499c439e1a106b9b6e1ee9c322fba
-
SHA1
dd197aa26f1a62698fc12e33a683e15e17676751
-
SHA256
567ec3acd9476e275db49721f6907c612f2c21db9b451c950b1bcd00d0f39baa
-
SHA512
72c7841aaf7899d464254e763b5f1465381cbc4e2aa3de6a2f98a8b9008c02e05252b5c19b79def71fe4ed976f6c62567ac72e9440431b02e31fe93242f9999b
-
SSDEEP
192:7VoW9KF5O8n0rfg9ssPNgvXorMMpsJ2YJhfH0JOqsmVgz28WhBq7i9n:pZKG8oY9ssmCmr78JN77hhki9
Malware Config
Signatures
Files
-
567ec3acd9476e275db49721f6907c612f2c21db9b451c950b1bcd00d0f39baa.exe windows:4 windows x64 arch:x64
Code Sign
33:00:03:e2:cd:10:66:ad:8d:b8:1c:06:08:00:00:00:03:e2:cdCertificate
IssuerCN=Microsoft Azure RSA TLS Issuing CA 07,O=Microsoft Corporation,C=USNot Before14/09/2023, 17:24Not After08/09/2024, 17:24SubjectCN=www.microsoft.com,O=Microsoft Corporation,L=Redmond,ST=WA,C=US7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12/01/2016, 00:00Not After11/01/2031, 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23/12/2017, 00:00Not After22/03/2029, 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
6b:ec:ac:b2:82:1c:a2:8c:c0:a9:89:3b:73:c1:99:22:3c:06:5b:26:36:d6:91:30:4d:55:53:dc:50:ea:16:54Signer
Actual PE Digest6b:ec:ac:b2:82:1c:a2:8c:c0:a9:89:3b:73:c1:99:22:3c:06:5b:26:36:d6:91:30:4d:55:53:dc:50:ea:16:54Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ