terraform_1.10.5_windows_amd64.zip
- SHA256 4e2c6b7232aa30026baf9fe575f1bf4006c2a0cbbcdcbd244573dc188b439239
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
terraform.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
terraform.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target terraform_1.10.5_windows_amd64.zip
- Size 26.7MB
- Sample260818-ezptgsej21
- SHA256 4e2c6b7232aa30026baf9fe575f1bf4006c2a0cbbcdcbd244573dc188b439239
- MD5 416d984f600ee510d6e1db2fbe51319f
- SHA1 50a6d5841ec1c93c6455f5e0e8156b5b522b1cd7
- SHA512 2f39430c3576afc08db4cf1098b362f72119864e46c8d83dfa7e65ea653f7c8c59d50465031f2a68f35ca4f97ab8b1d36eddd7e755103817dea3f66985ac92cb
- SSDEEP 393216:30SZXg+HOB1QWXWPrcc6zZmkWI9nteb9eE56aGTHxrKEYyfETGJhA9vLuzvQ4FiO:kStg+uLQWrILktiwX9fZf4rBi7Q40MJ
- TLSH T1DE5733D186E5C85AE31B47E0F93A0B216B743D8E953BC784C0D55108C482FEAD9FAADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/terraform.exe
File Explorer
-
terraform_1.10.5_windows_amd64.zip.zip 26.7MB
-
LICENSE.txt4KB
-
terraform.exe.exe 88.1MB
LICENSE.txt
- SHA256 cbc10ac2a8fb6cdd8093471d7790c16ae97fee656b627de10d7716de7c627120
- MD5 668a2b90ac703ec2cb16d35919ff28c8
- SHA1 c1cb3a0a77b58d71f9df2eb77e90b30aa478c611
- SHA512 e55569966f926d804fcb97cf023e142154e2f129f3aff531a8be50750345832872e4d54822289e346cd0b76f8e93010349ce4283bab9fe0affe9bae014f87a10
- SSDEEP 96:g6VrtAKvIGfPiK//LR1ynJMP8t7kEsisO2Qc1ab:4S/HqW930
- TLSH T144A1DE2EBE0513B713C101927F1B58CFE32DD096136A87A174AC86580776E2C43F699F
- MD5 SHA1 SHA512 SSDEEP TLSH
terraform.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 07dfb0fe8ae9d4ce50cea4f553f84fc166081eb015d3ca8c21b29a8f4f57d1fa
- MD5 d11b2a7c8bab49fc76a306261294023a
- SHA1 bbd7a658b20ec67f1252e5d86f18fc1e400ac85b
- SHA512 1f3e73126c3574719a675ccb86a21e887b0432619d6ceab4d41c5ece46741540d530ef0d10c3b10ac878d4845abd545138c72c0b88c073f6af9a454dcddc16b4
- SSDEEP 393216:2o2gtm1mo9GGoKuP83VtIFkWYg5evTcPopkWbC6Glh3PIk:F2gtm1XUUakifPWkplh3PIk
- TLSH T11F183B53E95540F8C9ADD934C6659263BF71BC888B2023D72FA0FA246F77BD0A679340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
39:46:ae:fb:36:f6:37:41:fd:5a:3a:7e:20:f5:17:8f:d3:5d:d2:79:83:6a:53:ed:6c:ee:ab:05:f6:91:9d:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=HashiCorp\, Inc.,OU=HashiCorp Security,O=HashiCorp\, Inc.,L=San Francisco,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=HashiCorp\, Inc.,OU=HashiCorp Security,O=HashiCorp\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0b:26:fb:4e:1c:1a:6b:c3:26:46:02:18:92:58:44:9d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 10, 2023 - Jan 9, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
497152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
42.5MB
Virtual Size
42.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41.8MB
Virtual Size
41.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.1MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
982KB
Virtual Size
982KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
742KB
Virtual Size
741KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ