5bf430688deacda4290f9efdcca428cb[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
5bf430688deacda4290f9efdcca428cb.exe
Size 1.1MB
Sample220308-w52tnsdcdn
SHA256 ebcd0c7de9878d9c83848e8adf3b135c34ede61cf39caede45ea3f2855c77e43
MD5 5bf430688deacda4290f9efdcca428cb
SHA1 1c60953e8782879af4dc21c761530693bf052612
SHA512 1a243a324d3dcdfee0487dc1548886a6d8d99f9e5c256f988cac91e8e874b0130e924ad1c08bf725dc8cc5d1f018a4c60d5f9004ffd37da681326a3eb9986994
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5bf430688deacda4290f9efdcca428cb.exe

.exe 1.1MB

5bf430688deacda4290f9efdcca428cb.exe

SHA256 ebcd0c7de9878d9c83848e8adf3b135c34ede61cf39caede45ea3f2855c77e43
MD5 5bf430688deacda4290f9efdcca428cb
SHA1 1c60953e8782879af4dc21c761530693bf052612
SHA512 1a243a324d3dcdfee0487dc1548886a6d8d99f9e5c256f988cac91e8e874b0130e924ad1c08bf725dc8cc5d1f018a4c60d5f9004ffd37da681326a3eb9986994
MD5 SHA1 SHA512

windows x86

PE Signature issue

Digest

64:2d:07:35:be:91:5a:51:a7:37:be:a7:d2:f6:3c:ea:77:a7:30:3c:c0:2b:bd:b6:2b:47:30:cb:3c:06:59:4c

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmo,ST=Skåne,C=SE

Serial Number

72:2a:66:67:75:dc:48:0e:a2:b8:41:41:3d:7b:87:65

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 27, 2019 - Apr 3, 2022

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

71KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

699KB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

32KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qNmoND1

Size

313KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE