2f60704e2dac47d532955485a04c195dffa41f9e638527ac42c82a224b2202ea

Sharing

Copy URL

Twitter E-mail

General

Target

2f60704e2dac47d532955485a04c195dffa41f9e638527ac42c82a224b2202ea
Size

1.7MB
MD5

bb9e3c71b3ee3279632905f905ac21c4
SHA1

a2b1d81ec6a21b52f555f5ec7e9cf9a73f937971
SHA256

2f60704e2dac47d532955485a04c195dffa41f9e638527ac42c82a224b2202ea
SHA512

f63faf0d317fa32fa9e091dfb0327752433c94c2d8171ef1d4b988288012de2062c89c37c87513873010e7ea78e71d54981ca17cec333222eb9ad9bbb9600916

Score

N/A

Malware Config

Signatures

Files

2f60704e2dac47d532955485a04c195dffa41f9e638527ac42c82a224b2202ea
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:af:09:ed:9a:63:fc:49:d6:93:ba:e6:71:1c:d7:47:39:af:4d:94:b5:d5:f2:96:92:63:5c:c1:29:2e:b6:3f
Signer

Actual PE Digest

fd:af:09:ed:9a:63:fc:49:d6:93:ba:e6:71:1c:d7:47:39:af:4d:94:b5:d5:f2:96:92:63:5c:c1:29:2e:b6:3f

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

10-03-2022 13:56
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fd:af:09:ed:9a:63:fc:49:d6:93:ba:e6:71:1c:d7:47:39:af:4d:94:b5:d5:f2:96:92:63:5c:c1:29:2e:b6:3fSigner

Signature Validations

Verification

10-03-2022 13:56 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 60KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fd:af:09:ed:9a:63:fc:49:d6:93:ba:e6:71:1c:d7:47:39:af:4d:94:b5:d5:f2:96:92:63:5c:c1:29:2e:b6:3f
Signer

10-03-2022 13:56
Valid: false

.text
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 12B