5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
- SHA256 5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
Static task
static1
Behavioral task
behavioral1
Sample
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361.exe
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target 5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
- Size 272KB
- Sample241108-bwkhtascnf
- SHA256 5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da
- MD5 a569e271c4bfee807a1bf5743808520b
- SHA1 bd329f497e1044c39439e5abb4bf7b38c28c6f66
- SHA512 e7a2f00e347b4165cd699135d3edc209be7dc3d48c33aab714151bfc5274e7443ec01db52a608d2b8c9f8b7a7a36d6c59f043409b0a035354f5b537ec20fdf38
- SSDEEP 6144:NuPVgJp8boDRB7HkMK6nIlPB3LvdsyfzBzKNPJBi7NPcXBYNNU9:Nvf8Y7EuIlZdnrFgx47tcxZ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
5c2096021a8a97a7fb621c5d52476dd9c98c4d06113eea71aefc79a860fdf9da.zip 272KB
-
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361.exe 330KB
5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361
- IMPHASH f7ccc17c5b0d4d925addebd09c627595
- SHA256 5c51b93c1c6c3417222b12f14d7182d2f6892da208bd363ceb8487d23c7d8361
- MD5 63e9d77e94253f7bc52083eaba402994
- SHA1 f1443410775377ee4298b251ee8ac15ff8539636
- SHA512 7db138dffaeee5fc9f9cffe3a3f95ffd621122e8db5704168fe10c35b740126657012fa47139d33d33e468e6170e600a22224d85b2e724f79ab0fba93e5dbcc7
- SSDEEP 6144:/HDkOSBM35FMK6nElPB3L/dsyfzBnKNPJBo7NPcfBgad279:/dSBMPuEl1dnrVgxq7tcfGr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
51:2c:75:27:58:42:05:9a:3c:1a:3b:45:97:7c:d5:78:8b:31:fd:be:b5:98:27:aa:74:a1:8c:bb:97:e5:7a:8c
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Chains
Jun 21, 2017
CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
0e:65:f2:ef:9d:5c:29:06:4e:19:74:76:db:7f:6f:51:46:30:4e:dc
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US
Chains
Jun 21, 2017
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US
Serial Number
14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2015 - Jul 26, 2018
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Serial Number
7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:de
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 13, 2015 - Jul 13, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=Starfield Services Timestamp Authority - G1,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US
Serial Number
32:58:e8:ee:54:af:5c:27
Issuer
CN=Starfield Services Root Certificate Authority,OU=http://certificates.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 13, 2016 - Dec 13, 2021
Minor OS version
0
Major OS version
5
Entry point
25591
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\kub_napica\riduvupa84\gujuheyu.pdb
kernel32
FillConsoleOutputCharacterA
EnumSystemCodePagesA
LocalFree
FindNextFileW
WriteConsoleInputW
EnumDateFormatsA
OpenMutexW
CopyFileExW
ReadConsoleOutputCharacterW
SetVolumeLabelW
FatalExit
VerifyVersionInfoW
QueryDosDeviceA
EnumCalendarInfoExW
RequestWakeupLatency
LocalSize
TlsGetValue
CreateFileA
SetMailslotInfo
GetWindowsDirectoryA
GetModuleHandleW
VirtualFree
CreateDirectoryExA
GetLogicalDriveStringsA
WriteConsoleInputA
FindNextVolumeMountPointA
OpenWaitableTimerA
TransactNamedPipe
GetCPInfoExA
SearchPathA
IsSystemResumeAutomatic
CallNamedPipeA
GetProcAddress
GetModuleHandleA
GlobalAlloc
MoveFileWithProgressW
GetVolumeInformationW
VerifyVersionInfoA
CancelTimerQueueTimer
DeleteTimerQueueTimer
GetConsoleFontSize
FindNextVolumeW
InterlockedIncrement
GetACP
HeapSetInformation
GetConsoleTitleW
GetPrivateProfileStructW
GetConsoleAliasExesLengthW
InterlockedExchangeAdd
EnumCalendarInfoW
InterlockedDecrement
GetEnvironmentStrings
SetLastError
GetConsoleAliasesLengthW
GetVolumeNameForVolumeMountPointW
SetCalendarInfoW
TerminateProcess
MoveFileA
FindAtomA
GetMailslotInfo
FreeEnvironmentStringsW
SetConsoleTitleA
SetVolumeMountPointA
GetOEMCP
GetProcessHandleCount
CreateDirectoryExW
LoadLibraryA
GlobalFindAtomW
GetTickCount
GetLogicalDrives
GetCommandLineA
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
DeleteFileA
GetStartupInfoA
HeapAlloc
HeapFree
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
user32
GetMessageTime
GetListBoxInfo
gdi32
GetCharWidth32A
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
222KB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=19, id=149, productName=VS2008 build 21022, version=21022,
count=104, id=131, productName=VS2008 build 21022, version=21022,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=145, id=1, productName=Unmarked objects,
count=45, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,