General

Malware Config

Signatures

Files

• 12fdab70f2ce661a0cd09c7862edb45aa9c974a564d1236dacf7ae81decd95af

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Code Sign

  42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

  Certificate

  Issuer

  CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

  Not Before

  07-06-2005 08:09

  Not After

  30-05-2020 10:48

  Subject

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  27-04-2011 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

  Certificate

  Issuer

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60

  Certificate

  Issuer

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Not Before

  01-06-2020 16:17

  Not After

  01-07-2020 16:17

  Subject

  CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  e6

  Certificate

  Issuer

  CN=Ascertia Root CA 2,O=Ascertia,C=GB

  Not Before

  21-04-2009 12:15

  Not After

  14-04-2028 23:59

  Subject

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60

  Certificate

  Issuer

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Not Before

  01-06-2020 16:17

  Not After

  01-07-2020 16:17

  Subject

  CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  e6

  Certificate

  Issuer

  CN=Ascertia Root CA 2,O=Ascertia,C=GB

  Not Before

  21-04-2009 12:15

  Not After

  14-04-2028 23:59

  Subject

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  01-08-2030 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9

  Signer

  Actual PE Digest

  61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

  01-06-2020 18:38

  Valid: false

  7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10

  Signer

  Actual PE Digest

  7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

  01-06-2020 18:38

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ