Static task
static1
Behavioral task
behavioral1
Sample
8416c8cafb3e59f5252fae02e7198351a63a60b37efbd9d8135b27b52c32f6b1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8416c8cafb3e59f5252fae02e7198351a63a60b37efbd9d8135b27b52c32f6b1.exe
Resource
win10v2004-20240802-en
General
-
Target
8416c8cafb3e59f5252fae02e7198351a63a60b37efbd9d8135b27b52c32f6b1
-
Size
1.5MB
-
MD5
e053973c725096fb129c9c4d8147018c
-
SHA1
b952853daa360349f514faf91e95e7c474eb0bfd
-
SHA256
8416c8cafb3e59f5252fae02e7198351a63a60b37efbd9d8135b27b52c32f6b1
-
SHA512
77dabe395df75c68f43766346104e4455cb4e5bfa53dfd403c945c9e399e3e3f417a9277eaa248f6a28410d6a8214d920c4af21e837d2e1557e6833f04111866
-
SSDEEP
49152:1vVq2cxB/6ou3KMxegB+WDTRcAArgqsQ/TVuQbe9z:LqFDnu3KqbTRijTVuQbeh
Malware Config
Signatures
Files
-
8416c8cafb3e59f5252fae02e7198351a63a60b37efbd9d8135b27b52c32f6b1.exe windows:4 windows x86 arch:x86
6560b3d336ee97385d933c4b814597a3
Code Sign
5e:8e:9c:78:64:4d:e8:8b:4f:25:21:0b:57:5d:f1:17Certificate
IssuerCN=Copyright(C) 2013-2024 51Cxsoft.com 版权所有,C=ChinaNot Before29/02/2024, 05:02Not After30/12/2099, 16:00SubjectCN=Copyright(C) 2013-2024 51Cxsoft.com 版权所有,C=China05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
5e:8e:9c:78:64:4d:e8:8b:4f:25:21:0b:57:5d:f1:17Certificate
IssuerCN=Copyright(C) 2013-2024 51Cxsoft.com 版权所有,C=ChinaNot Before29/02/2024, 05:02Not After30/12/2099, 16:00SubjectCN=Copyright(C) 2013-2024 51Cxsoft.com 版权所有,C=China05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d1:0a:e8:b3:0c:6a:72:12:a2:19:36:7c:08:9a:f6:b7:91:bf:e0:d3:38:72:c9:27:45:d4:de:ed:0a:d3:2c:4eSigner
Actual PE Digestd1:0a:e8:b3:0c:6a:72:12:a2:19:36:7c:08:9a:f6:b7:91:bf:e0:d3:38:72:c9:27:45:d4:de:ed:0a:d3:2c:4eDigest Algorithmsha256PE Digest Matchestrue46:1c:82:20:b4:a1:ff:c1:25:c1:ab:5f:e5:53:e2:ce:d4:4d:d0:64Signer
Actual PE Digest46:1c:82:20:b4:a1:ff:c1:25:c1:ab:5f:e5:53:e2:ce:d4:4d:d0:64Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
winmm
waveOutOpen
ws2_32
WSACleanup
user32
GetDC
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.MPRESS1 Size: 1.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE