b234696a063259c2a5ff15957478b99b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b234696a063259c2a5ff15957478b99b.exe
Size 1.1MB
Sample220310-vjkslahbb7
SHA256 79e15969948ef41c2ea9a9753ef6c890d9179372e7fc3eaaeb94bf061f22e0d5
MD5 b234696a063259c2a5ff15957478b99b
SHA1 755efc85945ece280bd6ecb194daea2833d1c7a3
SHA512 b14b5f399e315f5c8475b71e0ffc2e5e4d65038e02024b836e590fd35a4a8633cbb5f8802941287d77e0d91647c4a8850261bfb70770929901bba4ccbcaa47bd
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

b234696a063259c2a5ff15957478b99b.exe

.exe 1.1MB

b234696a063259c2a5ff15957478b99b.exe

SHA256 79e15969948ef41c2ea9a9753ef6c890d9179372e7fc3eaaeb94bf061f22e0d5
MD5 b234696a063259c2a5ff15957478b99b
SHA1 755efc85945ece280bd6ecb194daea2833d1c7a3
SHA512 b14b5f399e315f5c8475b71e0ffc2e5e4d65038e02024b836e590fd35a4a8633cbb5f8802941287d77e0d91647c4a8850261bfb70770929901bba4ccbcaa47bd
MD5 SHA1 SHA512

windows x86

PE Signature issue

Digest

57:9d:21:12:fa:c3:aa:43:26:c6:08:9e:9f:34:53:d8:ff:0d:b5:64:e2:d9:33:7f:f0:08:f9:cc:79:a3:b2:2a

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmo,ST=Skåne,C=SE

Serial Number

72:2a:66:67:75:dc:48:0e:a2:b8:41:41:3d:7b:87:65

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 27, 2019 - Apr 3, 2022

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

70KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

696KB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

31KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.2tuTA0Q

Size

311KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE