Static task
static1
Behavioral task
behavioral1
Sample
57d9a7d980708c246c2ae3787b21fd40N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
57d9a7d980708c246c2ae3787b21fd40N.exe
Resource
win10v2004-20240802-en
General
-
Target
57d9a7d980708c246c2ae3787b21fd40N.exe
-
Size
103KB
-
MD5
57d9a7d980708c246c2ae3787b21fd40
-
SHA1
25300b3e24aa87385f69d5bb17cbe55304234dd7
-
SHA256
eabf5eaf3f5c8bbd027dadb88b1e934f9c9da54f751c85115930ec3d5716879b
-
SHA512
12787a297683d0c22304909dbd35bda40e9ed2087e3703a436419618adc80e0e3758b6565bc2afdfcfab24eae78b071ea3f4940b668c8aead7d2fa26858b7882
-
SSDEEP
1536:AgN7LFs7x81EvicbTtLhDU9iMUhJ5K2e1eoLjf8eq+ZxnDgKN7:An7O12iKTtLJU9iMUhJB0n0efnDgKN7
Malware Config
Signatures
Files
-
57d9a7d980708c246c2ae3787b21fd40N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
01:f7:28:f8:f8:44:14:5b:dd:84:a7:21:ac:db:0d:d8:1c:f6:96:00Certificate
IssuerCN=https://danielbarros.com.br,OU=TI,O=Daniel da Silva Barros,L=Nova Iguacu,ST=Rio de Janeiro,C=BR,1.2.840.113549.1.9.1=#0c1761646d4064616e69656c626172726f732e636f6d2e6272Not Before21/05/2024, 15:11Not After27/04/2124, 15:11SubjectCN=https://danielbarros.com.br,OU=TI,O=Daniel da Silva Barros,L=Nova Iguacu,ST=Rio de Janeiro,C=BR,1.2.840.113549.1.9.1=#0c1761646d4064616e69656c626172726f732e636f6d2e62723a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate
IssuerCN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GBNot Before15/01/2024, 00:00Not After14/04/2035, 23:59SubjectCN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate
IssuerCN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GBNot Before22/03/2021, 00:00Not After21/03/2036, 23:59SubjectCN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before22/03/2021, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
92:50:13:9b:67:46:00:d1:8a:71:93:6f:2f:e8:86:f3:1e:ec:7f:ec:05:f5:30:31:33:80:19:d8:af:91:5f:53Signer
Actual PE Digest92:50:13:9b:67:46:00:d1:8a:71:93:6f:2f:e8:86:f3:1e:ec:7f:ec:05:f5:30:31:33:80:19:d8:af:91:5f:53Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ