bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494

Sharing

Copy URL

Twitter E-mail

General

Target

bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
Size

5.1MB
MD5

2438b851e157a3f70bd48af1984b2139
SHA1

105ce31ecdce604bf8629ddc6580f2ad25fc21b5
SHA256

bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
SHA512

ff1ba2eee03a981744434984d431f022afee988745a54d268c39df258502ba57d9880c916050370e351a709ab42928c0a7c3665a7b80b384e9832841e3d76c52
SSDEEP

98304:hoJgPPz4jnKiw6qbse0KZ3U/TUpm9OMtUdvHW4i/6jUH2+9Nx40u:onKl6qgeUoSOdPZi/GUH2QX40u

Score

N/A

Malware Config

Signatures

Files

bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
.exe windows x64

7dbd2319b33ed25eb7ad7d0162c2bb3a

Code Sign

2c:cd:36:e7:01:97:05:32
Certificate

Issuer

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

Not Before

12-07-2022 00:00

Not After

12-07-2024 00:00

Subject

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

2c:cd:36:e7:01:97:05:32
Certificate

Issuer

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

Not Before

12-07-2022 00:00

Not After

12-07-2024 00:00

Subject

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

95:73:9a:dd:0f:67:51:d3:b2:8d:cb:22:c9:a0:2d:bc:1e:f2:d6:25:98:e4:88:3e:65:68:d3:b6:5f:4a:a2:97
Signer

Actual PE Digest

95:73:9a:dd:0f:67:51:d3:b2:8d:cb:22:c9:a0:2d:bc:1e:f2:d6:25:98:e4:88:3e:65:68:d3:b6:5f:4a:a2:97

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

26-08-2022 16:50
Valid: false

87:e5:d2:d6:fe:64:93:f1:a4:79:c4:df:13:63:93:83:5c:49:70:2f
Signer

Actual PE Digest

87:e5:d2:d6:fe:64:93:f1:a4:79:c4:df:13:63:93:83:5c:49:70:2f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=WinDef,O=WindowsDefender,L=Los Angeles,C=US,1.2.840.113549.1.9.1=#0c1477696e646566406d6963726f736f66742e636f6d

26-08-2022 16:50
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
GetWindowsDirectoryA
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dbd2319b33ed25eb7ad7d0162c2bb3a

Code Sign

2c:cd:36:e7:01:97:05:32Certificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

2c:cd:36:e7:01:97:05:32Certificate

Extended Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

95:73:9a:dd:0f:67:51:d3:b2:8d:cb:22:c9:a0:2d:bc:1e:f2:d6:25:98:e4:88:3e:65:68:d3:b6:5f:4a:a2:97Signer

Signature Validations

Verification

26-08-2022 16:50 Valid: false

87:e5:d2:d6:fe:64:93:f1:a4:79:c4:df:13:63:93:83:5c:49:70:2fSigner

Signature Validations

Verification

26-08-2022 16:50 Valid: false

Headers

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4.8MB - Virtual size: 4.8MB

.bss Size: - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 144B

.rsrc Size: 252KB - Virtual size: 251KB

2c:cd:36:e7:01:97:05:32
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

2c:cd:36:e7:01:97:05:32
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

95:73:9a:dd:0f:67:51:d3:b2:8d:cb:22:c9:a0:2d:bc:1e:f2:d6:25:98:e4:88:3e:65:68:d3:b6:5f:4a:a2:97
Signer

26-08-2022 16:50
Valid: false

87:e5:d2:d6:fe:64:93:f1:a4:79:c4:df:13:63:93:83:5c:49:70:2f
Signer

26-08-2022 16:50
Valid: false

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4.8MB - Virtual size: 4.8MB

.bss
Size: - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 144B

.rsrc
Size: 252KB - Virtual size: 251KB