0319b6a8d4a848a68071a3b2a1406974a8a75f32754dd375230f22d1160e9916

Sharing

Copy URL Twitter E-mail

General

Target

0319b6a8d4a848a68071a3b2a1406974a8a75f32754dd375230f22d1160e9916
Size

19KB
MD5

2b965ad20753646966b45b3e9f795780
SHA1

c0139cdca1e4be634c0de2ab5969d0f95619ab62
SHA256

0319b6a8d4a848a68071a3b2a1406974a8a75f32754dd375230f22d1160e9916
SHA512

0e9d24b2bdf2832dab873b9c4a7d7a03a6d34b604e6a20256fa7dc1e71dc230f3a688b8ff0791c5d3b935a28372ce2f807e8fe178c8ee8382579b2b504881870
SSDEEP

384:x0GsKjAJUBtneryURa02wDBRJAnvHSVOY/wR9za5it:x0wBiyRw1PcPW/M9zh

Score

N/A

Malware Config

Signatures

Files

0319b6a8d4a848a68071a3b2a1406974a8a75f32754dd375230f22d1160e9916
.exe windows x64

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:f1:78:98:60:a0:bf:67:d9:80:ca:43:dd:60:82:51:91:29:1c:90:b2:ac:9f:d6:b7:3d:5d:c2:e0:97:0a:6d
Signer

Actual PE Digest

ee:f1:78:98:60:a0:bf:67:d9:80:ca:43:dd:60:82:51:91:29:1c:90:b2:ac:9f:d6:b7:3d:5d:c2:e0:97:0a:6d

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

26/08/2022, 16:48
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3cCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

ee:f1:78:98:60:a0:bf:67:d9:80:ca:43:dd:60:82:51:91:29:1c:90:b2:ac:9f:d6:b7:3d:5d:c2:e0:97:0a:6dSigner

Signature Validations

Verification

26/08/2022, 16:48 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 8KB - Virtual size: 7KB

.rsrc Size: 2KB - Virtual size: 1KB

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

ee:f1:78:98:60:a0:bf:67:d9:80:ca:43:dd:60:82:51:91:29:1c:90:b2:ac:9f:d6:b7:3d:5d:c2:e0:97:0a:6d
Signer

26/08/2022, 16:48
Valid: false

.text
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 1KB