terraform_1.9.8_windows_amd64.zip
- SHA256 2667de56106bc6707968286357e29c20f8dbbb2f429ef57099b04994f82d9684
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
terraform.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
terraform.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target terraform_1.9.8_windows_amd64.zip
- Size 26.1MB
- Sample260817-pltwdszekd
- SHA256 2667de56106bc6707968286357e29c20f8dbbb2f429ef57099b04994f82d9684
- MD5 d595d164524f6483c2aab95dc0e69b2e
- SHA1 023a317cba9f1ab1b732fa140f94c705c3b6d77a
- SHA512 506c19d04f75a886e834477a68d8cca3e6674c98f57f7d834c900c0eb73b1de2451655f34d07d172456c5fb51f425e8c76293ef8eddac867800d6157d020ce25
- SSDEEP 786432:trRwt4FDeDlz7M+N4m2eLbxEW2DtpneSPp88vOCn3:I4FChIHDRWItpneSP28vOq3
- TLSH T1055733DCE57D9B076C1C8B1474AA6F0D28C6C1AB9A8B13622E5F7E71A04E1B70F55C2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/terraform.exe
File Explorer
-
terraform_1.9.8_windows_amd64.zip.zip 26.1MB
-
LICENSE.txt4KB
-
terraform.exe.exe 86.9MB
LICENSE.txt
- SHA256 cbc10ac2a8fb6cdd8093471d7790c16ae97fee656b627de10d7716de7c627120
- MD5 668a2b90ac703ec2cb16d35919ff28c8
- SHA1 c1cb3a0a77b58d71f9df2eb77e90b30aa478c611
- SHA512 e55569966f926d804fcb97cf023e142154e2f129f3aff531a8be50750345832872e4d54822289e346cd0b76f8e93010349ce4283bab9fe0affe9bae014f87a10
- SSDEEP 96:g6VrtAKvIGfPiK//LR1ynJMP8t7kEsisO2Qc1ab:4S/HqW930
- TLSH T144A1DE2EBE0513B713C101927F1B58CFE32DD096136A87A174AC86580776E2C43F699F
- MD5 SHA1 SHA512 SSDEEP TLSH
terraform.exe
- IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
- SHA256 7d6217a8b147d7e6d852f4b331a707dfbc0f5c78b9ebad753f54ea1048581fb9
- MD5 830f590cc9b915d12589dd934c4761f9
- SHA1 7de8122804f4b2d15aaa67663e4b34c3f93e661b
- SHA512 8fd65721015135cbc8233d293495724f2266c31d03ab8ad1eea083622bb0e6d4a913b2d7dfcdb1af94ee968669e1da36ecc6f7fd62120e21f725a72db1e9951e
- SSDEEP 393216:kK3fx63dOrcvSklpLmtDjg6nfnnzo6T6zGRpVRIFzVOT7ZQn:kK3fQ3dOCjpknzo6GGF2FYHZ0
- TLSH T1E3185C43E46541E4C9EDD434C6269623BF717C888B2063D76FB0FA246B77BD0A6BA740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ab:72:4d:68:f0:d1:3d:66:70:1d:c2:7b:c4:d1:c0:a0:3b:1b:c7:11:30:9c:da:0e:92:09:bf:0d:79:12:0d:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=HashiCorp\, Inc.,OU=HashiCorp Security,O=HashiCorp\, Inc.,L=San Francisco,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=HashiCorp\, Inc.,OU=HashiCorp Security,O=HashiCorp\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0b:26:fb:4e:1c:1a:6b:c3:26:46:02:18:92:58:44:9d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 10, 2023 - Jan 9, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
468992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
40.7MB
Virtual Size
40.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42.5MB
Virtual Size
42.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.0MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
949KB
Virtual Size
949KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
707KB
Virtual Size
707KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ