Static task
static1
Behavioral task
behavioral1
Sample
d9e38ad881fef9b2dd648e447a781590N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e38ad881fef9b2dd648e447a781590N.exe
Resource
win10v2004-20240802-en
General
-
Target
d9e38ad881fef9b2dd648e447a781590N.exe
-
Size
7.9MB
-
MD5
d9e38ad881fef9b2dd648e447a781590
-
SHA1
5c416fbbe1f88a57fbc52b668bddf11ce082a0bf
-
SHA256
3e995fe533d7f71309ca1b1c9e572152f696da05e61032cdbb821e3fff57e4d6
-
SHA512
962eca5df6ac7090d52047e02b2d7452f2773c05f3c50d06b536cd26e16a90197e51fe10b616fedeaad440268b92bae04a97a810e59b50ee84a9f9c841322daf
-
SSDEEP
196608:18DKppAV9crMIgHXJwj4rMIfXJfoI1zi7p8m2CIC4qtuD2tEJe8:1LCVyw3Jw0vJgIxuzqChuDVJe8
Malware Config
Signatures
Files
-
d9e38ad881fef9b2dd648e447a781590N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
1a:7d:31:e8:32:b5:30:f9Certificate
IssuerCN=Cubesokyo Root CA,O=CubesokyoNot Before30/08/2024, 00:00Not After28/08/2034, 00:00SubjectCN=Cubesokyo Root CA,O=Cubesokyo53:05:13:5f:8b:fe:48:3fCertificate
IssuerCN=Cubesokyo Root CA,O=CubesokyoNot Before30/08/2024, 00:00Not After30/08/2025, 00:00SubjectCN=Cubesokyo Code Sign,O=CubesokyoExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before22/03/2021, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate
IssuerCN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GBNot Before22/03/2021, 00:00Not After21/03/2036, 23:59SubjectCN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate
IssuerCN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GBNot Before15/01/2024, 00:00Not After14/04/2035, 23:59SubjectCN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
9e:af:18:40:eb:8a:60:33:c3:04:3a:8a:ca:90:5c:cc:80:9a:a8:32:8b:cf:a9:59:c2:a2:6e:e0:40:d7:f0:9dSigner
Actual PE Digest9e:af:18:40:eb:8a:60:33:c3:04:3a:8a:ca:90:5c:cc:80:9a:a8:32:8b:cf:a9:59:c2:a2:6e:e0:40:d7:f0:9dDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\dozil\source\repos\LauncherPrestarter\Prestarter\obj\Release\cubesokyoLauncher.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ