Static task
static1
Behavioral task
behavioral1
Sample
SignKeyGen.exe
Resource
win11-20240704-en
General
-
Target
SignKeyGen1.0.8.7z
-
Size
862KB
-
MD5
d62e6aeeb3118bbade6074034673e59b
-
SHA1
d88ae065a7fa0f398050b7c045c759b5fa2cd703
-
SHA256
898b03faf93c84f304650297a16825288edce20e2b81bbe9eb71ae07b31a3db8
-
SHA512
b23699e49641d35932751f60e61e3c9ff7ee48ff79febbfd082c4a47413928f8287e19644f6fd1bf4970403b165bc42fd5c57a784280843d5fb54e72a4f80e50
-
SSDEEP
24576:OKPCXRfs2BAaLlXY6bgBmlZoozeCtGiFxk4pAfGf:OcChfs2BHCWOceCtGsxk2AfGf
Malware Config
Signatures
Files
-
SignKeyGen1.0.8.7z.7z
-
SignKeyGen.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7f:24:5f:80:47:fe:cd:65Certificate
IssuerCN=Adler SignKey CA,O=Adler Soft Development,L=LuhanskNot Before25/05/2021, 00:00Not After25/05/2024, 00:00SubjectCN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk49:8b:7a:27:b6:6c:72:25Certificate
IssuerCN=Adler SignKey CA,O=Adler Soft Development,L=LuhanskNot Before04/06/2021, 00:00Not After04/06/2024, 00:00SubjectCN=Adler,O=Adler Development,L=Luhansk,C=LPRExtended Key Usages
ExtKeyUsageCodeSigning
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23/10/2020, 00:00Not After22/01/2032, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
7f:24:5f:80:47:fe:cd:65Certificate
IssuerCN=Adler SignKey CA,O=Adler Soft Development,L=LuhanskNot Before25/05/2021, 00:00Not After25/05/2024, 00:00SubjectCN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk49:8b:7a:27:b6:6c:72:25Certificate
IssuerCN=Adler SignKey CA,O=Adler Soft Development,L=LuhanskNot Before04/06/2021, 00:00Not After04/06/2024, 00:00SubjectCN=Adler,O=Adler Development,L=Luhansk,C=LPRExtended Key Usages
ExtKeyUsageCodeSigning
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23/10/2020, 00:00Not After22/01/2032, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1a:00:f5:64:ec:c7:4c:04:9f:28:a5:c9:35:83:a0:ff:ca:5d:a7:5b:3a:db:68:df:b1:73:12:86:c2:d7:1e:77Signer
Actual PE Digest1a:00:f5:64:ec:c7:4c:04:9f:28:a5:c9:35:83:a0:ff:ca:5d:a7:5b:3a:db:68:df:b1:73:12:86:c2:d7:1e:77Digest Algorithmsha256PE Digest Matchestrue07:5c:16:24:03:b2:ea:2b:4a:d2:b4:8f:ba:7b:98:c4:18:ab:6c:3fSigner
Actual PE Digest07:5c:16:24:03:b2:ea:2b:4a:d2:b4:8f:ba:7b:98:c4:18:ab:6c:3fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 857KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ