General

Malware Config

Signatures

Files

• dbf9af1860c4848cbe6f773a7ddf65ef93d8d122ad29f5e66b968dc7ce725667

  .exe windows x86

  2eabe9054cad5152567f0699947a2c5b

  
  

  Code Sign

  42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

  Certificate

  Issuer

  CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

  Not Before

  07-06-2005 08:09

  Not After

  30-05-2020 10:48

  Subject

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  27-04-2011 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

  Certificate

  Issuer

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  56:37:8e:f7:52:92:14:e1:0d:c7:05:a0:88:23:82:b0:1a:7b:b8:0d

  Certificate

  Issuer

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Not Before

  04-07-2019 06:51

  Not After

  04-08-2019 06:51

  Subject

  CN=gddfsgdgsrtrdsegdaftgdsa,OU=gratdsgsdatresgfdfgdsfgdstrdsfg,O=dsfgdsratdsgfdsrtdsfgrsdetgdsf,L=dsrtdsfgdsrtdsfgdsrtsdagdsfgdsfg,ST=drtdsfgdsftrrethdsfgsdatfrsetgdrg,C=AN,1.2.840.113549.1.9.1=#0c356667736467747274726766647364616672747274646767646466674068666464677364736667686764732e74727472676467736467

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  e6

  Certificate

  Issuer

  CN=Ascertia Root CA 2,O=Ascertia,C=GB

  Not Before

  21-04-2009 12:15

  Not After

  14-04-2028 23:59

  Subject

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  56:37:8e:f7:52:92:14:e1:0d:c7:05:a0:88:23:82:b0:1a:7b:b8:0d

  Certificate

  Issuer

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Not Before

  04-07-2019 06:51

  Not After

  04-08-2019 06:51

  Subject

  CN=gddfsgdgsrtrdsegdaftgdsa,OU=gratdsgsdatresgfdfgdsfgdstrdsfg,O=dsfgdsratdsgfdsrtdsfgrsdetgdsf,L=dsrtdsfgdsrtdsfgdsrtsdagdsfgdsfg,ST=drtdsfgdsftrrethdsfgsdatfrsetgdrg,C=AN,1.2.840.113549.1.9.1=#0c356667736467747274726766647364616672747274646767646466674068666464677364736667686764732e74727472676467736467

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  e6

  Certificate

  Issuer

  CN=Ascertia Root CA 2,O=Ascertia,C=GB

  Not Before

  21-04-2009 12:15

  Not After

  14-04-2028 23:59

  Subject

  CN=Ascertia Public CA 1,O=Ascertia,C=GB

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  01-08-2030 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  df:52:86:2c:ba:46:34:fb:9e:91:56:a4:7d:b7:40:4b:56:fa:b6:c8:e2:56:11:c8:84:91:0d:52:27:11:b8:ec

  Signer

  Actual PE Digest

  df:52:86:2c:ba:46:34:fb:9e:91:56:a4:7d:b7:40:4b:56:fa:b6:c8:e2:56:11:c8:84:91:0d:52:27:11:b8:ec

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=gddfsgdgsrtrdsegdaftgdsa,OU=gratdsgsdatresgfdfgdsfgdstrdsfg,O=dsfgdsratdsgfdsrtdsfgrsdetgdsf,L=dsrtdsfgdsrtdsfgdsrtsdagdsfgdsfg,ST=drtdsfgdsftrrethdsfgsdatfrsetgdrg,C=AN,1.2.840.113549.1.9.1=#0c356667736467747274726766647364616672747274646767646466674068666464677364736667686764732e74727472676467736467

  04-07-2019 06:53

  Valid: false

  78:f0:ce:4c:84:1b:c9:21:c6:e9:19:4f:78:1b:f2:a1:d7:24:d3:f1

  Signer

  Actual PE Digest

  78:f0:ce:4c:84:1b:c9:21:c6:e9:19:4f:78:1b:f2:a1:d7:24:d3:f1

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=gddfsgdgsrtrdsegdaftgdsa,OU=gratdsgsdatresgfdfgdsfgdstrdsfg,O=dsfgdsratdsgfdsrtdsfgrsdetgdsf,L=dsrtdsfgdsrtdsfgdsrtsdagdsfgdsfg,ST=drtdsfgdsftrrethdsfgsdatfrsetgdrg,C=AN,1.2.840.113549.1.9.1=#0c356667736467747274726766647364616672747274646767646466674068666464677364736667686764732e74727472676467736467

  04-07-2019 06:53

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpy

  Sections

  Size: 1.3MB - Virtual size: 2.9MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 512B - Virtual size: 3.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  yjecxjsb

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  dzeuucst

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE