Static task
static1
Behavioral task
behavioral1
Sample
28c0be675bfeba553858558bd1cb69768b7dbfa1de5284dfb268fe27b2c33933.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28c0be675bfeba553858558bd1cb69768b7dbfa1de5284dfb268fe27b2c33933.exe
Resource
win10v2004-20240226-en
General
-
Target
28c0be675bfeba553858558bd1cb69768b7dbfa1de5284dfb268fe27b2c33933
-
Size
11.2MB
-
MD5
78b4868e9a8924c72d1571afb042db46
-
SHA1
2ef627a0179ca6020bab6229ba78f32dc0c2b543
-
SHA256
28c0be675bfeba553858558bd1cb69768b7dbfa1de5284dfb268fe27b2c33933
-
SHA512
ed0ba4abe37efd84ecd33a352255d1c837aa95f51714243c476c4328a5e263ac3dd1a19b1eca81aa24651ae431ea28715500a241efa252c043d3eeb9682224b7
-
SSDEEP
196608:fQMfincd2BIb9g2mStk0SJR6H6HAZPMmdQSEqDr5zhee4+IumAewQfrVPN4:fV32BQg2mAkNHqdGSEUzQtumAarJ+
Malware Config
Signatures
Files
-
28c0be675bfeba553858558bd1cb69768b7dbfa1de5284dfb268fe27b2c33933.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Code Sign
01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20-05-2023 11:58Not After19-05-2024 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CN01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20-05-2023 11:58Not After19-05-2024 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CNa4:cb:9b:d6:51:f0:36:40:35:d7:c7:30:f9:b5:59:46:95:31:70:3e:8e:b5:ca:6a:cb:07:6e:50:45:90:43:f4Signer
Actual PE Digesta4:cb:9b:d6:51:f0:36:40:35:d7:c7:30:f9:b5:59:46:95:31:70:3e:8e:b5:ca:6a:cb:07:6e:50:45:90:43:f4Digest Algorithmsha256PE Digest Matchestruea9:9a:dd:f6:b9:28:95:da:b2:a8:d4:08:99:fe:7f:95:90:f0:3f:0aSigner
Actual PE Digesta9:9a:dd:f6:b9:28:95:da:b2:a8:d4:08:99:fe:7f:95:90:f0:3f:0aDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2.6MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drefxrwm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmticwmy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE