Static task
static1
Behavioral task
behavioral1
Sample
964ed0eaac827ec0813f123495af56d88718c74b1512cc60f5baf40d83fe0d3a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
964ed0eaac827ec0813f123495af56d88718c74b1512cc60f5baf40d83fe0d3a.exe
Resource
win10v2004-20240802-en
General
-
Target
964ed0eaac827ec0813f123495af56d88718c74b1512cc60f5baf40d83fe0d3a
-
Size
40KB
-
MD5
8f1023733db792732951c366fd4e717c
-
SHA1
4a8bc5499e9100a6ef79083cd329417dd43cd17d
-
SHA256
964ed0eaac827ec0813f123495af56d88718c74b1512cc60f5baf40d83fe0d3a
-
SHA512
9e61ec3bdeead3e93d03dbdf20b86f3bc3028baf705c185542500dc675161433319ee8b09ae23d1e5d42358d33c257f83c9e7b47db653a78c1ceb3c5ea5105f2
-
SSDEEP
768:nZ4PjZLMqbwuYkVKHQu5gqYc8b/qf2bBFxsMW2F+Qu2H53I:nmhMqVEz6qYcMq+bhsMJFhHH53I
Malware Config
Signatures
Files
-
964ed0eaac827ec0813f123495af56d88718c74b1512cc60f5baf40d83fe0d3a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4f:d9:64:ec:24:0e:da:86:4b:2a:7f:ca:e8:ab:ae:f0Certificate
IssuerCN=SPPC-NB-MC\\KS-TestNot Before25/09/2024, 08:52Not After25/09/2025, 14:52SubjectCN=SPPC-NB-MC\\KS-Test68:a2:3f:00:b0:77:24:e2:fb:c3:e7:c7:d3:2f:82:87:75:13:a4:01Signer
Actual PE Digest68:a2:3f:00:b0:77:24:e2:fb:c3:e7:c7:d3:2f:82:87:75:13:a4:01Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\Workspace\_2022_SPPC\2_Logitech\Qbert_ManufactureTest_SPPC\USB_Billboard_Hid_Test\bb\winusb_cs\winusb_cs\obj\Debug\WinUsb_cs.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ