Static task
static1
Behavioral task
behavioral1
Sample
bfb88bcae0a2c91bffa9b04ae58a554742d8c2535615fddd2b8f3f39a686497b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bfb88bcae0a2c91bffa9b04ae58a554742d8c2535615fddd2b8f3f39a686497b.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb88bcae0a2c91bffa9b04ae58a554742d8c2535615fddd2b8f3f39a686497b.exe
-
Size
186KB
-
MD5
bcd29c0719e40428074d98ba84e76e08
-
SHA1
c077404d74fb2ba22143676bdfb39bf6f696bd18
-
SHA256
bfb88bcae0a2c91bffa9b04ae58a554742d8c2535615fddd2b8f3f39a686497b
-
SHA512
941900a6899356fbcb98bac0cee2a0021e83a8f76caf8f06c15f1d58b591ed5425e362b66b386c5a8e061c12c0471e58f8c8b24bb111bef031898d7c4656a275
-
SSDEEP
3072:xKxGi7yvvrOIQ7di0Jcyo8gFKBe5MjdVV1jD9/8rF5xBL:4xTvDJcyRQWjJy
Malware Config
Signatures
Files
-
bfb88bcae0a2c91bffa9b04ae58a554742d8c2535615fddd2b8f3f39a686497b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4a:05:be:98:e0:e7:ad:7f:bb:84:98:b3:0c:a3:a3:e5Certificate
IssuerCN=HoYu College IT Dept,1.2.840.113549.1.9.1=#0c0f77686340686f79752e6564752e686bNot Before13/07/2024, 05:27Not After31/12/2039, 23:59SubjectCN=HoYu College IT Dept,1.2.840.113549.1.9.1=#0c0f77686340686f79752e6564752e686b0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
4f:a8:c9:8d:3c:14:94:29:f2:cf:42:4b:a6:a9:04:94:a2:b4:94:67Signer
Actual PE Digest4f:a8:c9:8d:3c:14:94:29:f2:cf:42:4b:a6:a9:04:94:a2:b4:94:67Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ