970a842514991c82220737c3cd6345c3d993038670fce80efd50ed6245cdde81
- IMPHASH c5f844dd8f82b6eb605d542b82a73b98
- SHA256 970a842514991c82220737c3cd6345c3d993038670fce80efd50ed6245cdde81
-
CryptOne packer
Detects CryptOne packer defined in NCC blogpost.
PE Signature issue
Digest
fb:e2:01:d3:36:59:e3:fc:6a:97:b9:d7:c1:ad:19:4d:13:3d:b2:af
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Datamean Technologies LTD,O=Datamean Technologies LTD,POSTALCODE=7577,STREET=25 Tasou Konstantinou,L=Mazotos,ST=Larnaca,C=CY
Serial Number
24:3f:59:9a:f4:d8:bc:8d:1b:31:14:31:ea:86:52:23
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 10, 2020 - Apr 10, 2021
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Minor OS version
Major OS version
Entry point
106880
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
776KB
Virtual Size
775KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ