ae2c512f485e93e67d8addbad8688890.bin
- SHA256 33286d7918c0f86e4eea209c65e2d55c30b8c2d6ce4c83059ee5c4e07d2469d2
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
2c23ebfdae563e676de0f80ed5277ef022dcf6b8d1a6c612162d182658ba628d.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2c23ebfdae563e676de0f80ed5277ef022dcf6b8d1a6c612162d182658ba628d.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target ae2c512f485e93e67d8addbad8688890.bin
- Size 8.2MB
- Sample240624-drywrazamk
- SHA256 33286d7918c0f86e4eea209c65e2d55c30b8c2d6ce4c83059ee5c4e07d2469d2
- MD5 e2e57d5d11a0c2b10ce29312138d044b
- SHA1 84b20bdbeb2be92c9c397a0317052c837d6881ed
- SHA512 e513cab7918b12a4fb0a666d6f603e5992ff2bb4d28a655ecb10fdce862c34afbdc26ff798740bcb3e48715cf278ff97af73acb58dfca0b1c5561d3ad601cf48
- SSDEEP 196608:XW5S7dTn8mUuFo18avIH7tZQknBJee4zZdk2T+k/zE/1CnO:kSRT9UuFAAHQknhUPQ/1CnO
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
ae2c512f485e93e67d8addbad8688890.bin.zip 8.2MB
-
2c23ebfdae563e676de0f80ed5277ef022dcf6b8d1a6c612162d182658ba628d.exe.exe 8.5MB
2c23ebfdae563e676de0f80ed5277ef022dcf6b8d1a6c612162d182658ba628d.exe
- IMPHASH 9282f3b9dc55e770e81f2c00e0208888
- SHA256 2c23ebfdae563e676de0f80ed5277ef022dcf6b8d1a6c612162d182658ba628d
- MD5 ae2c512f485e93e67d8addbad8688890
- SHA1 375bcec9ad095f039ea8cbb22b558b0a3749c9e8
- SHA512 eb8661fac9f83a8f597ac777f82cd082035ca6c540af9e2ab9cff5c4213f5b1ae7eb4d7b174886e14377664e2c17dcd58327dfd9ead241692ad0ffd614a0320e
- SSDEEP 196608:lL8uVdZwZKkc5HKu5h44azrnnopUcC8l7qjc9ZFnozOc7FkBv:l7VdZw7cM8yprnbcr7qI9ZrcQ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
f3:c9:7e:e8:d6:16:7c:89:11:2f:f5:42:fd:a8:c6:1e:62:83:b7:42
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=深圳市创想天空科技股份有限公司,OU=R&D Dept.,O=深圳市创想天空科技股份有限公司,L=深圳市,ST=广东省,C=CN
Chains
May 31, 2024
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=深圳市创想天空科技股份有限公司,OU=R&D Dept.,O=深圳市创想天空科技股份有限公司,L=深圳市,ST=广东省,C=CN
Serial Number
0d:b7:71:51:2a:c4:7c:37:e2:d0:f5:25:81:77:f8:ae
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2022 - Aug 14, 2024
Minor OS version
0
Major OS version
5
Entry point
12037410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcrt
_iob
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
FreeSid
wsock32
getsockopt
ws2_32
WSARecv
Name
.text
Size
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.4<2
Size
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.zqL
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pzW
Size
8.5MB
Virtual Size
8.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ