44ede6e1b9be1c013f13d82645f7a9cff7d92b267778f19b46aa5c1f7fa3c10b[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

44ede6e1b9be1c013f13d82645f7a9cff7d92b267778f19b46aa5c1f7fa3c10b.bin
Size

570KB
MD5

3f2036d6638df7dbeeaacd45d52c007b
SHA1

fc747b3049c96afde43d91e6089da7d3865931b9
SHA256

44ede6e1b9be1c013f13d82645f7a9cff7d92b267778f19b46aa5c1f7fa3c10b
SHA512

7c48919e37abc7fb927f93b159f1b262e4168785f5f12a3b64f8d09a0c912f0a9af534a3343b5fdcf5b40bc437aa9b7308703d37be6022450733b46f6ccbfc8e
SSDEEP

6144:oUCE98sDXeHfijLo9qLV+yJqG3OOU0qs4wLjqonWpWjaBQY:LCS6HQSmlqGW0EwLtWwe7

Score

N/A

Malware Config

Signatures

Files

44ede6e1b9be1c013f13d82645f7a9cff7d92b267778f19b46aa5c1f7fa3c10b.bin
.dll windows x86

9217a44a86a3f5ea87d2259a5905279d

Code Sign

5c:5e:30:13:88:9c:78:53:ba:55:7a:c9:0f:39:8e:84
Certificate

Issuer

CN=AHYKURGXLQFNQZUZJZ

Not Before

20-10-2020 03:54

Not After

31-12-2039 23:59

Subject

CN=AHYKURGXLQFNQZUZJZ

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ba:64:fd:71:8c:87:96:c2:f7:59:64:5e:52:0d:72:50:c3:01:1e:c4
Signer

Actual PE Digest

ba:64:fd:71:8c:87:96:c2:f7:59:64:5e:52:0d:72:50:c3:01:1e:c4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=AHYKURGXLQFNQZUZJZ

14-07-2022 15:02
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
LoadLibraryA
GetProcAddress

user32

GetLastActivePopup
LoadIconA
CharUpperA
LoadIconW

gdi32

GetEnhMetaFileBits

advapi32

RegOpenKeyA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata5
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata4
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9217a44a86a3f5ea87d2259a5905279d

Code Sign

5c:5e:30:13:88:9c:78:53:ba:55:7a:c9:0f:39:8e:84Certificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

ba:64:fd:71:8c:87:96:c2:f7:59:64:5e:52:0d:72:50:c3:01:1e:c4Signer

Signature Validations

Verification

14-07-2022 15:02 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata6 Size: 512B - Virtual size: 100B

.rdata5 Size: 10KB - Virtual size: 9KB

.rdata4 Size: 10KB - Virtual size: 9KB

.rdata3 Size: 350KB - Virtual size: 350KB

.data Size: 1024B - Virtual size: 764B

.rsrc Size: 189KB - Virtual size: 188KB

.reloc Size: 512B - Virtual size: 368B

5c:5e:30:13:88:9c:78:53:ba:55:7a:c9:0f:39:8e:84
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

ba:64:fd:71:8c:87:96:c2:f7:59:64:5e:52:0d:72:50:c3:01:1e:c4
Signer

14-07-2022 15:02
Valid: false

.text
Size: 3KB - Virtual size: 2KB

.rdata6
Size: 512B - Virtual size: 100B

.rdata5
Size: 10KB - Virtual size: 9KB

.rdata4
Size: 10KB - Virtual size: 9KB

.rdata3
Size: 350KB - Virtual size: 350KB

.data
Size: 1024B - Virtual size: 764B

.rsrc
Size: 189KB - Virtual size: 188KB

.reloc
Size: 512B - Virtual size: 368B