Static task
static1
Behavioral task
behavioral1
Sample
001b78ad699beb6be60e36898c4bb8a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
001b78ad699beb6be60e36898c4bb8a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
001b78ad699beb6be60e36898c4bb8a0N.exe
-
Size
3.6MB
-
MD5
001b78ad699beb6be60e36898c4bb8a0
-
SHA1
cde17bfa7dc3b9cfb0d8568516b27d6ec61d894e
-
SHA256
1cf2d08b13e81a9a9bf28a17c956bdfd73069d4d718da0c7bc4285072062ffe8
-
SHA512
ce21d5db32d829d50379d8a4b00a9c0b9920aa52cf56923a251d818c14eacc33337cbaec0dcbe44417be2947eb8d4b30785a1b1f04537c936a42ed6dc55e7df4
-
SSDEEP
98304:DKA0uXiTHgcSX+KMK55t4KruphNZa5ck8C0gea6oSpgddLn5l17xMGUSm8952NhX:DKVKrupnZaJurQo/
Malware Config
Signatures
Files
-
001b78ad699beb6be60e36898c4bb8a0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
46:19:03:a0:29:c6:95:7b:67:bb:00:b9:3d:d5:0e:6f:62:cc:36:21Certificate
IssuerCN=GrafixNot Before04/08/2024, 21:13Not After04/08/2025, 21:13SubjectCN=Grafix05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
de:39:2c:f5:14:ec:b6:49:24:b3:35:30:c1:0b:23:d8:49:42:83:ae:24:aa:7a:8a:82:9c:35:a4:19:4a:90:76Signer
Actual PE Digestde:39:2c:f5:14:ec:b6:49:24:b3:35:30:c1:0b:23:d8:49:42:83:ae:24:aa:7a:8a:82:9c:35:a4:19:4a:90:76Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\kadir\OneDrive\Masaüstü\Grafix-75676e81e43a1d4c5a962fd19a59b94a24be4992\bin\Debug\net452\GrafixClientOut.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ