a1321aea2ae27640565f0b8cfed2e4a6[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

a1321aea2ae27640565f0b8cfed2e4a6.exe
Size

1.6MB
MD5

a1321aea2ae27640565f0b8cfed2e4a6
SHA1

d4cbc6fdbe1435f3d614a21db2f369be40c0fc76
SHA256

986b1e107fdcf5ba3eec492626b08ea3d4e2091931d10b196a11c790a6f43d0c
SHA512

913fdfa9d7c81a30dc4742f385db355bf53abb8138ccf587f2ebceb0d2f890c47a0f5c1d103e7ab919271503c682f2500df7a58c6454376665537405730cd9dc
SSDEEP

49152:6+eyXDZdWnq1yTa1QFAJ15TyeVGanL7CaWwJ4m2ZgBh:VeyLkTa1QFm15TyeVGFw4m2g

Score

N/A

Malware Config

Signatures

Files

a1321aea2ae27640565f0b8cfed2e4a6.exe
.exe windows x86

5a498eee87e4d89512a84502f500181f

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16-10-2020 00:00

Not After

24-10-2023 23:59

Subject

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16-10-2020 00:00

Not After

24-10-2023 23:59

Subject

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:fc:05:8a:e0:27:47:c4:30:04:4a:4d:e8:c9:da:45:87:b1:21:7d:f0:59:d5:ab:1e:16:71:df:98:84:b9:88
Signer

Actual PE Digest

0f:fc:05:8a:e0:27:47:c4:30:04:4a:4d:e8:c9:da:45:87:b1:21:7d:f0:59:d5:ab:1e:16:71:df:98:84:b9:88

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

09-11-2021 13:16
Valid: true

Chain 1

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

f0:cb:d8:12:c3:5d:f7:a6:01:18:35:99:d7:1d:da:e5:5d:21:1c:85
Signer

Actual PE Digest

f0:cb:d8:12:c3:5d:f7:a6:01:18:35:99:d7:1d:da:e5:5d:21:1c:85

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

09-11-2021 13:16
Valid: true

Chain 1

CN=RealVNC Ltd,O=RealVNC Ltd,L=Cambridge,C=GB

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

ZxBe
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gTod
Size: 820KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

d5kV
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0Pnx
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

JldP
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ouo3
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

4Kj4ny
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a498eee87e4d89512a84502f500181f

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

0f:fc:05:8a:e0:27:47:c4:30:04:4a:4d:e8:c9:da:45:87:b1:21:7d:f0:59:d5:ab:1e:16:71:df:98:84:b9:88Signer

Signature Validations

Verification

09-11-2021 13:16 Valid: true

Chain 1

f0:cb:d8:12:c3:5d:f7:a6:01:18:35:99:d7:1d:da:e5:5d:21:1c:85Signer

Signature Validations

Verification

09-11-2021 13:16 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

ZxBe Size: 146KB - Virtual size: 146KB

gTod Size: 820KB - Virtual size: 819KB

d5kV Size: 124KB - Virtual size: 124KB

0Pnx Size: 4KB - Virtual size: 7KB

JldP Size: 546KB - Virtual size: 546KB

ouo3 Size: 12KB - Virtual size: 11KB

4Kj4ny Size: 13KB - Virtual size: 16KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

06:0c:43:c8:90:48:4c:a5:e4:e0:35:62:6c:80:87:35
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

0f:fc:05:8a:e0:27:47:c4:30:04:4a:4d:e8:c9:da:45:87:b1:21:7d:f0:59:d5:ab:1e:16:71:df:98:84:b9:88
Signer

09-11-2021 13:16
Valid: true

f0:cb:d8:12:c3:5d:f7:a6:01:18:35:99:d7:1d:da:e5:5d:21:1c:85
Signer

09-11-2021 13:16
Valid: true

ZxBe
Size: 146KB - Virtual size: 146KB

gTod
Size: 820KB - Virtual size: 819KB

d5kV
Size: 124KB - Virtual size: 124KB

0Pnx
Size: 4KB - Virtual size: 7KB

JldP
Size: 546KB - Virtual size: 546KB

ouo3
Size: 12KB - Virtual size: 11KB

4Kj4ny
Size: 13KB - Virtual size: 16KB