12fdab70f2ce661a0cd09c7862edb45aa9c974a564d1236dacf7ae81decd95af

Sharing

Copy URL

Twitter E-mail

General

Target

12fdab70f2ce661a0cd09c7862edb45aa9c974a564d1236dacf7ae81decd95af
Size

1.1MB
MD5

51742a4508425c35b73662e12f6c1cb5
SHA1

d65b66a7c59f070dc1a35b563b753f4eddfdd431
SHA256

12fdab70f2ce661a0cd09c7862edb45aa9c974a564d1236dacf7ae81decd95af
SHA512

1330f7e246eeb600bf60d972cd05c9a3f0a0558955d75958cff6f62b86c43c8a9386eed1fc5433c290f0c1db4b853d0403bd56f2451444f0a8e6311f6b6ba052
SSDEEP

24576:D1BBjNkw6O1s3YneBzqPYpFPZzhiYwmEKlB2nsr:Y/O1C8epr3iYwbKua

Score

N/A

Malware Config

Signatures

Files

12fdab70f2ce661a0cd09c7862edb45aa9c974a564d1236dacf7ae81decd95af
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07-06-2005 08:09

Not After

30-05-2020 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27-04-2011 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

30-05-2020 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

01-06-2020 16:17

Not After

01-07-2020 16:17

Subject

CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21-04-2009 12:15

Not After

14-04-2028 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

01-06-2020 16:17

Not After

01-07-2020 16:17

Subject

CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21-04-2009 12:15

Not After

14-04-2028 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9
Signer

Actual PE Digest

61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

01-06-2020 18:38
Valid: false

7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10
Signer

Actual PE Digest

7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Vernante Calec,OU=Vernante Calec,O=Vernante Calec,L=Vernante Calec,ST=Vernante Calec,C=UK,1.2.840.113549.1.9.1=#0c147665726e616e7465407665726e616e74652e636f

01-06-2020 18:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9Signer

Signature Validations

Verification

01-06-2020 18:38 Valid: false

7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10Signer

Signature Validations

Verification

01-06-2020 18:38 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 12B

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60
Certificate

e6
Certificate

23:cd:12:6b:f4:5e:56:36:31:c5:01:9f:cb:0f:af:4d:fd:77:52:60
Certificate

e6
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

61:db:b7:ab:76:e8:98:62:8c:3d:54:e5:34:be:dd:6b:09:0c:83:d4:7b:69:5e:e2:79:d1:13:0f:1c:60:a4:f9
Signer

01-06-2020 18:38
Valid: false

7c:31:b4:31:88:aa:0b:ff:44:9c:81:14:88:a1:8b:81:01:a7:fd:10
Signer

01-06-2020 18:38
Valid: false

.text
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 12B