Static task
static1
Behavioral task
behavioral1
Sample
c20fdacaabc51f1020b0cd81acb3dceb21630686e31f4ddb8d8c10578b2afd9d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c20fdacaabc51f1020b0cd81acb3dceb21630686e31f4ddb8d8c10578b2afd9d.exe
Resource
win10v2004-20240226-en
General
-
Target
c20fdacaabc51f1020b0cd81acb3dceb21630686e31f4ddb8d8c10578b2afd9d
-
Size
11.0MB
-
MD5
c2012da0c388d8735e4ffed19893daab
-
SHA1
25fb74fc0b1c87cd11163ab4f846aa75c62b8c3b
-
SHA256
c20fdacaabc51f1020b0cd81acb3dceb21630686e31f4ddb8d8c10578b2afd9d
-
SHA512
1bcca737bf259b306a45c5410fe51d964837b9f1e4ab6a90486c59916abe44afcd602640b098684a69733a4dd4d7fd8516187f29d8216f2d0eca55b54f9d1d37
-
SSDEEP
196608:7z7MX4ymiVrKJ1EkEKuBXHNDSYWuEKfgN2tnDNfTPyHL40OqEytbSRLl:n7MX4ErKJ1EvKu9HNDSYWVKfoqnR7PyW
Malware Config
Signatures
Files
-
c20fdacaabc51f1020b0cd81acb3dceb21630686e31f4ddb8d8c10578b2afd9d.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Code Sign
01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20/05/2023, 11:58Not After19/05/2024, 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CN01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20/05/2023, 11:58Not After19/05/2024, 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CN83:e0:98:67:ad:95:71:b5:1d:ed:15:9c:47:fa:ec:59:1c:c2:0a:ca:de:f9:41:c2:01:37:b4:e7:d1:54:61:d4Signer
Actual PE Digest83:e0:98:67:ad:95:71:b5:1d:ed:15:9c:47:fa:ec:59:1c:c2:0a:ca:de:f9:41:c2:01:37:b4:e7:d1:54:61:d4Digest Algorithmsha256PE Digest Matchestrued1:70:e3:82:00:03:83:20:55:7c:08:57:da:44:81:b9:78:65:75:23Signer
Actual PE Digestd1:70:e3:82:00:03:83:20:55:7c:08:57:da:44:81:b9:78:65:75:23Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2.6MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dilfjhmr Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ixdgqmco Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE