Static task
static1
Behavioral task
behavioral1
Sample
68ea586b47a082031bce6c18e81f4b7a1980a698ca3bf8b355cfa9ff51f8e980.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
68ea586b47a082031bce6c18e81f4b7a1980a698ca3bf8b355cfa9ff51f8e980.exe
Resource
win10v2004-20241007-en
General
-
Target
68ea586b47a082031bce6c18e81f4b7a1980a698ca3bf8b355cfa9ff51f8e980
-
Size
1.6MB
-
MD5
9762eb306438f3e409c3aa851864c49b
-
SHA1
51e37fc5211c540af24d83163b44baa816197af6
-
SHA256
68ea586b47a082031bce6c18e81f4b7a1980a698ca3bf8b355cfa9ff51f8e980
-
SHA512
d6edbdafd554ecae8c0113efa72a2d5c8b53481ffed00f09d09b8b55b09813d3d5546b003d6cef111ed1f526a55e1271e40e4bd00114abce7d1d924119b99840
-
SSDEEP
49152:/EOV4XkYUqLL4Tlt8KkI11pOenPGSm+SzKax0:/EOah5LL4Tlt9lOWQzKQ0
Malware Config
Signatures
Files
-
68ea586b47a082031bce6c18e81f4b7a1980a698ca3bf8b355cfa9ff51f8e980.exe windows:5 windows x86 arch:x86
3c3b24b32cd54387da9d261869ec6fd3
Code Sign
05:2a:5d:8b:4b:46:46:91:50:db:6b:c8:be:a4:86:33Certificate
IssuerCN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=USNot Before25/07/2022, 00:00Not After18/08/2023, 23:59SubjectCN=www.origin.com,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12/01/2016, 00:00Not After11/01/2031, 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23/12/2017, 00:00Not After22/03/2029, 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
9b:59:38:47:3f:c9:13:dd:36:e6:40:aa:7f:87:41:0b:8f:71:52:a1:97:f9:3d:c6:e5:05:af:8e:ed:83:87:ebSigner
Actual PE Digest9b:59:38:47:3f:c9:13:dd:36:e6:40:aa:7f:87:41:0b:8f:71:52:a1:97:f9:3d:c6:e5:05:af:8e:ed:83:87:ebDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Gijejij gadol ban\Godote\vewepin dapihisa\Gakibi dekavi toge.pdb
Imports
kernel32
AcquireSRWLockShared
CloseHandle
LoadResource
SetWaitableTimer
MulDiv
SetEvent
CreateWaitableTimerW
GenerateConsoleCtrlEvent
GetConsoleWindow
GetConsoleAliasesA
GetHandleInformation
GetCommandLineW
GetDllDirectoryA
ResetWriteWatch
SetCommBreak
ClearCommError
FreeLibrary
EnumResourceNamesA
GetConsoleCP
GetFileSizeEx
ExitProcess
LoadLibraryW
SuspendThread
GetCurrentThread
GetThreadLocale
GetStringTypeW
GetWindowsDirectoryW
HeapCreate
GetSystemInfo
SetStdHandle
SetFilePointer
FlushFileBuffers
GetShortPathNameW
GetProcAddress
GetModuleHandleW
SetConsoleCP
LocalAlloc
HeapSize
LoadLibraryA
RaiseException
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
Sleep
MultiByteToWideChar
ReadConsoleInputA
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
HeapAlloc
HeapReAlloc
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
ReadFile
user32
GetClipboardOwner
GetDlgItemTextW
LoadMenuA
MessageBoxW
SetScrollInfo
gdi32
GetFontLanguageInfo
GetDIBColorTable
comdlg32
PrintDlgA
ole32
CoRevertToSelf
OleBuildVersion
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ