HEUR-Trojan-Banker.Win32.RTM.pef-c6051675a5f2b96e4f4ab960e132825859c7039e751dfcf4cc09f45d9d1c03e7
- IMPHASH de3ae5fdd8a570c86ac164493e1298ec
- SHA256 c6051675a5f2b96e4f4ab960e132825859c7039e751dfcf4cc09f45d9d1c03e7
PE Signature issue
Digest
a2:88:c4:2c:4e:65:f8:13:34:d2:50:86:62:04:0a:e6:2c:5e:ea:07
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=BMUZVYUGWSQWLAIISX
Serial Number
70:9d:54:7a:2f:09:d3:9c:4c:23:34:98:3f:2c:bf:50
Issuer
CN=BMUZVYUGWSQWLAIISX
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 21, 2021 - Dec 31, 2039
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
Major OS version
Entry point
6480
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
87B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text4
Size
315KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text8
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.text7
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.text6
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.text5
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ