068a8c2e9f4186b90520ba0aca721371bda7b05940d464a2a25a935a150dbeca
- SHA256 068a8c2e9f4186b90520ba0aca721371bda7b05940d464a2a25a935a150dbeca
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
c9d46ad5a9a42497b7c5949317e7cb743f865e84ba97a17289aaa69f91912a18.exe
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
c9d46ad5a9a42497b7c5949317e7cb743f865e84ba97a17289aaa69f91912a18.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target 068a8c2e9f4186b90520ba0aca721371bda7b05940d464a2a25a935a150dbeca
- Size 188KB
- Sample240417-pjfwraee56
- SHA256 068a8c2e9f4186b90520ba0aca721371bda7b05940d464a2a25a935a150dbeca
- MD5 0ea86f5cfd29a93ca3133d9c8cdcaa39
- SHA1 da01b6975b26e8586baba2fa5382dac29f1b394a
- SHA512 1c79c0db2b83eb3cff0cec035bf205e174fe5cfaf5ce53265a035a619ffcb4735c9d7e575ece52cb3614a665f00a738a1f38458fdcf83d17698452f12c95d701
- SSDEEP 3072:SGYuh9SxyQRs00clBJgWd4f1M51AaoU6hZvL9X6bWnvOzvd3MhVVVNy0vW:PYuhgxhRs+lBJgAa1MLcZhQPxYTNhvW
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
068a8c2e9f4186b90520ba0aca721371bda7b05940d464a2a25a935a150dbeca.zip 188KB
-
c9d46ad5a9a42497b7c5949317e7cb743f865e84ba97a17289aaa69f91912a18.exe.exe 404KB
c9d46ad5a9a42497b7c5949317e7cb743f865e84ba97a17289aaa69f91912a18.exe
- IMPHASH ea195bf8c93901cc0697df8bcbd3b755
- SHA256 c9d46ad5a9a42497b7c5949317e7cb743f865e84ba97a17289aaa69f91912a18
- MD5 8246a3c6f1dc7f210e53b273eef798a6
- SHA1 eb71ebc5ecea81511f813bfa08203d39d68e2014
- SHA512 6be43a2ac4da665b5526ce9afed69496e18b01ea64abbe4019f0debcb352e85cac9d22d9a56e1f4b48117d06342dfcc7b3e47e191463e2447c74b6e9187b1c74
- SSDEEP 12288:sH0b9StI3IXuNBHPMOYjzxLWxmS0uGPoq:sUZStI3IXFRuGQq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:05:e2:0c:e9:dc:01:56:2f:64:03:2e:5e:f0:26:06:89:43:97:59:c0:cb:b3:dc:fe:12:38:98:e5:37:5d:00
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345
Chains
Dec 4, 2023
SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=556703-7485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345
Serial Number
0f:ab:67:0a:61:bf:4b:7d:af:d5:59:35:6b:5b:cc:ff
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 4, 2023 - Oct 3, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
5094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetStringTypeW
GetStringTypeA
FreeConsole
VirtualAlloc
LoadLibraryA
lstrlenW
GetProcAddress
CreateThread
WaitForSingleObject
Sleep
VirtualProtect
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
user32
GetClassInfoA
CallWindowProcA
SetWindowLongA
CheckDlgButton
GetActiveWindow
LoadCursorA
MessageBoxA
wsprintfA
GetDlgItemTextA
gdi32
GetStockObject
DeleteObject
SetBkMode
SetTextColor
CreateFontIndirectA
SelectObject
GetObjectA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegDeleteKeyA
Cbns2cKJCod30Q9
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
303KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.H7Gy
Size
48KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=26, id=132, productName=VS2008 build 21022, version=21022,
count=16, id=149, productName=VS2008 build 21022, version=21022,
count=71, id=131, productName=VS2008 build 21022, version=21022,
count=8, id=123, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=97, id=1, productName=Unmarked objects,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,