6bba6f3268e99406db27258831b7f90dcd67eedfeadf5a9d21f2fa3c64091bca

Sharing

Copy URL

Twitter E-mail

General

Target

6bba6f3268e99406db27258831b7f90dcd67eedfeadf5a9d21f2fa3c64091bca
Size

1.3MB
MD5

1ed0417049b2a72cad3d18aa12d544eb
SHA1

afa868cdbc6cf10786f886f74b221df2a86f71f4
SHA256

6bba6f3268e99406db27258831b7f90dcd67eedfeadf5a9d21f2fa3c64091bca
SHA512

97c16b84b7f8de0f47072022d35b0ca8b67e69bd047822dcd0fe3e1055572eb118bfea264e9e0334a0db13f491643aa1ae4f11a054e9a21ab74bbe5614254fbb

Score

N/A

Malware Config

Signatures

Files

6bba6f3268e99406db27258831b7f90dcd67eedfeadf5a9d21f2fa3c64091bca
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:8b:72:c3:ba:a5:ab:7f:1a:bf:6d:93:8b:3e:a0:49:61:fd:d7:fa:ed:91:76:55:8c:fb:6e:78:4d:0d:87:d0
Signer

Actual PE Digest

d5:8b:72:c3:ba:a5:ab:7f:1a:bf:6d:93:8b:3e:a0:49:61:fd:d7:fa:ed:91:76:55:8c:fb:6e:78:4d:0d:87:d0

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

27-03-2022 09:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

} Z}fOS6
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d5:8b:72:c3:ba:a5:ab:7f:1a:bf:6d:93:8b:3e:a0:49:61:fd:d7:fa:ed:91:76:55:8c:fb:6e:78:4d:0d:87:d0Signer

Signature Validations

Verification

27-03-2022 09:58 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

} Z}fOS6 Size: 1.2MB - Virtual size: 1.2MB

.text Size: 51KB - Virtual size: 51KB

.rsrc Size: 2KB - Virtual size: 1KB

Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d5:8b:72:c3:ba:a5:ab:7f:1a:bf:6d:93:8b:3e:a0:49:61:fd:d7:fa:ed:91:76:55:8c:fb:6e:78:4d:0d:87:d0
Signer

27-03-2022 09:58
Valid: false

} Z}fOS6
Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 51KB - Virtual size: 51KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B