becfd4da0e51972ca49a6ed755b357f1e23d715b9d944096be6dd69e8814b2e2
- IMPHASH c5f844dd8f82b6eb605d542b82a73b98
- SHA256 becfd4da0e51972ca49a6ed755b357f1e23d715b9d944096be6dd69e8814b2e2
-
CryptOne packer
Detects CryptOne packer defined in NCC blogpost.
PE Signature issue
Digest
a2:fe:ed:f3:72:63:d4:d1:af:6b:cd:a8:25:eb:ff:5c:eb:d7:16:0f
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Datamean Technologies LTD,O=Datamean Technologies LTD,POSTALCODE=7577,STREET=25 Tasou Konstantinou,L=Mazotos,ST=Larnaca,C=CY
Serial Number
24:3f:59:9a:f4:d8:bc:8d:1b:31:14:31:ea:86:52:23
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 10, 2020 - Apr 10, 2021
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Minor OS version
Major OS version
Entry point
106880
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
776KB
Virtual Size
775KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ