Static task
static1
Behavioral task
behavioral1
Sample
d7a12471713dcd93d1f20473fb3c0563f2736ee2d28c1c23c6f3d760a40646ed.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d7a12471713dcd93d1f20473fb3c0563f2736ee2d28c1c23c6f3d760a40646ed.exe
Resource
win10v2004-20240802-en
General
-
Target
d7a12471713dcd93d1f20473fb3c0563f2736ee2d28c1c23c6f3d760a40646ed
-
Size
3.3MB
-
MD5
242b953a170b97aaa581da4161291d7b
-
SHA1
5cb1d0ebacb001d92c68765c86ce429df1929671
-
SHA256
d7a12471713dcd93d1f20473fb3c0563f2736ee2d28c1c23c6f3d760a40646ed
-
SHA512
89e108896e67822729fd0dd9f917fde66071a85395e27a862c89d51bce0279171da716f862f95ef95b0f339ec539fe93928fa82f3c3b29209a147ef156dd8c34
-
SSDEEP
98304:6FLdrU7bAQIwLUjmNeXgVF87LNDaMKfnpOZVAShXCAdQY5KiMhDfDY4vNd5nB9q6:IyF87LhaMEc0
Malware Config
Signatures
Files
-
d7a12471713dcd93d1f20473fb3c0563f2736ee2d28c1c23c6f3d760a40646ed.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
19:da:d4:d9:56:69:6a:81:49:3e:53:69:d7:2e:ae:47Certificate
IssuerCN=GrafixNot Before22/07/2024, 22:20Not After31/12/2039, 23:59SubjectCN=Grafix05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b6:6f:a7:ca:71:6c:35:93:35:9d:99:ec:69:8a:b1:2b:6e:1c:39:62:96:a8:4f:58:e3:d5:ef:3b:69:57:1f:00Signer
Actual PE Digestb6:6f:a7:ca:71:6c:35:93:35:9d:99:ec:69:8a:b1:2b:6e:1c:39:62:96:a8:4f:58:e3:d5:ef:3b:69:57:1f:00Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\kadir\OneDrive\Masaüstü\Grafix\Grafix.Api\bin\Debug\net8.0\net452\out\GrafixClient.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ