Behavioral task
behavioral1
Sample
AppGate2103v15.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AppGate2103v15.exe
Resource
win10v2004-20240419-en
General
-
Target
AppGate2103v15.exe
-
Size
5.9MB
-
MD5
fbb5534d3c24553179a13cc7b9c38685
-
SHA1
4f14d7dc5d966672abd4700b054307e096b88b48
-
SHA256
a1c687574b512e60c254447937836a11aca2ef11a928cf28c5e9e9138f7ce934
-
SHA512
2a379f547fe3613a8e65551ec9b6fe23dd04c868958c9e8f55a7b5eb6df2b5044402f17631fe5e7b10ef3e4b8ecd107a83c3be1a2bc3b4d301bcbc39a2697227
-
SSDEEP
98304:+1j1L2YgT7GKdrEXuQEhPcQKmpFn6lospghPMNvLQMowkrg3VOqvKNOetImz9AVf:kSRT7GKdrEXuQEhPcQKmpF6lospghPMN
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
AppGate2103v15.exe.exe windows:6 windows x64 arch:x64
Code Sign
12:3b:42:9c:3a:fd:48:a3:45:58:ff:52:0d:42:4f:c4Certificate
IssuerCN=AVG Technologies USA LLC �¡ @�Not Before03/01/2024, 10:48Not After04/01/2034, 10:48SubjectCN=AVG Technologies USA LLC �¡ @�39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
4a:b7:da:29:b8:f5:51:3a:bc:27:fc:6b:b5:36:60:e3:dd:e9:c7:95:bc:e3:85:54:b6:c2:b3:f4:39:ac:6b:3cSigner
Actual PE Digest4a:b7:da:29:b8:f5:51:3a:bc:27:fc:6b:b5:36:60:e3:dd:e9:c7:95:bc:e3:85:54:b6:c2:b3:f4:39:ac:6b:3cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 716KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE