Static task
static1
Behavioral task
behavioral1
Sample
4435da81d8bc840408afed9e993b3f0cc1aa08ff1cd03bbec609379517ec1379.exe
Resource
win7-20240221-en
General
-
Target
4435da81d8bc840408afed9e993b3f0cc1aa08ff1cd03bbec609379517ec1379
-
Size
5.3MB
-
MD5
102a9c6dfbd4bd3879659598b5c397a4
-
SHA1
91ec71b6ba511230f630649cf42ab5cfddc27a7f
-
SHA256
4435da81d8bc840408afed9e993b3f0cc1aa08ff1cd03bbec609379517ec1379
-
SHA512
016e6d2d3b81f0600dce1a3880a12445440e8f285daf79b7974eb0163b9982f54119a3e18cf0f834ddf93d1e833fd6f6313b13c55a83d1110870fa13604e76ba
-
SSDEEP
98304:aMLtRIGvXb72QC/SvPKGFE59+PN51sC6nuO77NFs3q67+I:aGRVNC/SHfw9WICcuiFUqI+I
Malware Config
Signatures
Files
-
4435da81d8bc840408afed9e993b3f0cc1aa08ff1cd03bbec609379517ec1379.exe windows:6 windows x86 arch:x86
423d8912ef7a82bc9e1e06bf4e6c7837
Code Sign
52:7c:4d:02:12:39:1b:8b:4c:fa:56:9e:4b:33:28:91Certificate
IssuerCN=Sony SEL-55210 55-210mm F4.5-6.3Not Before23/07/2021, 12:06Not After24/07/2031, 12:06SubjectCN=Sony SEL-55210 55-210mm F4.5-6.339:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
76:a9:c6:25:d8:b2:61:5a:71:e5:2a:42:80:b7:2d:9e:67:97:d1:bc:77:51:9f:0d:2d:6a:07:81:63:d9:a0:63Signer
Actual PE Digest76:a9:c6:25:d8:b2:61:5a:71:e5:2a:42:80:b7:2d:9e:67:97:d1:bc:77:51:9f:0d:2d:6a:07:81:63:d9:a0:63Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameA
shell32
ShellExecuteA
ole32
CoCreateInstance
ws2_32
send
Sections
.text Size: - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp^-^0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp^-^1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp^-^2 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ