d944eaaf828beaf9c7fdd48a69964911439a8d197e43468f59b502691d7105e8[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d944eaaf828beaf9c7fdd48a69964911439a8d197e43468f59b502691d7105e8.exe
Size

316KB
MD5

20a866f66079d8f4c7ea80b320196087
SHA1

4110702b42a7f96ce591c842706d9b7d2f697453
SHA256

d944eaaf828beaf9c7fdd48a69964911439a8d197e43468f59b502691d7105e8
SHA512

6379dfebeaf815c317c2b0f7f5a43e41f101498dc1225555ce0413c027d7962fdd2e99d821d45365560d85a29f23c931ec3852f56e4046f9016ef378efe3ccd4
SSDEEP

6144:VUIEEjZxyqXk/wpgcqkCoX8nSY6gKzgB1pUMo37m:VD7xY/wpgcqAXKSvHzAUMy

Score

N/A

Malware Config

Signatures

Files

d944eaaf828beaf9c7fdd48a69964911439a8d197e43468f59b502691d7105e8.exe
.exe windows x86

decbdbedc0627b2e9e8ce85b9d4aebeb

Code Sign

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/11/2019, 00:00

Not After

16/11/2022, 12:00

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=Unknown issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

Extended Key Usages

Key Usages

KeyUsageCertSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/07/2021, 00:00

Not After

10/07/2024, 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:53:e1:75:1c:93:66:40:ae:da:00:11:f1:b7:d1:a4:0b:d7:97:3a:6b:0f:6e:ef:92:0c:50:b3:59:66:95:ec
Signer

Actual PE Digest

70:53:e1:75:1c:93:66:40:ae:da:00:11:f1:b7:d1:a4:0b:d7:97:3a:6b:0f:6e:ef:92:0c:50:b3:59:66:95:ec

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

05/04/2022, 01:58
Valid: true

Chain 1

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

7f:ea:72:64:a4:16:f1:b4:0b:fd:72:ea:f9:7d:9c:c4:ec:5a:a1:b4
Signer

Actual PE Digest

7f:ea:72:64:a4:16:f1:b4:0b:fd:72:ea:f9:7d:9c:c4:ec:5a:a1:b4

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

05/04/2022, 01:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringW
SetWaitableTimer
WaitNamedPipeA
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesA
GetCPInfoExA
EnumResourceTypesW
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
DeleteFileA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
LoadLibraryW
AddRefActCtx
GetConsoleAliasW
FindFirstChangeNotificationA
WritePrivateProfileStringW
EnumResourceNamesA
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
GetComputerNameExW
FindNextFileW
SetPriorityClass
BuildCommDCBAndTimeoutsW
OpenJobObjectW
InitializeCriticalSection
FindResourceExW
SetConsoleMode
_lclose
SetCommMask
GetConsoleTitleW
CreateDirectoryExA
HeapAlloc
HeapSize
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
RtlUnwind
RaiseException
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW

user32

ClientToScreen
ScreenToClient

advapi32

BackupEventLogW
CloseEventLog
DeregisterEventSource
GetNumberOfEventLogRecords
GetEventLogInformation

winhttp

WinHttpSetTimeouts
WinHttpReadData

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

decbdbedc0627b2e9e8ce85b9d4aebeb

Code Sign

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

01Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

70:53:e1:75:1c:93:66:40:ae:da:00:11:f1:b7:d1:a4:0b:d7:97:3a:6b:0f:6e:ef:92:0c:50:b3:59:66:95:ecSigner

Signature Validations

Verification

05/04/2022, 01:58 Valid: true

Chain 1

7f:ea:72:64:a4:16:f1:b4:0b:fd:72:ea:f9:7d:9c:c4:ec:5a:a1:b4Signer

Signature Validations

Verification

05/04/2022, 01:58 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

winhttp

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 212KB - Virtual size: 585KB

.rsrc Size: 21KB - Virtual size: 21KB

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

01
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

70:53:e1:75:1c:93:66:40:ae:da:00:11:f1:b7:d1:a4:0b:d7:97:3a:6b:0f:6e:ef:92:0c:50:b3:59:66:95:ec
Signer

05/04/2022, 01:58
Valid: true

7f:ea:72:64:a4:16:f1:b4:0b:fd:72:ea:f9:7d:9c:c4:ec:5a:a1:b4
Signer

05/04/2022, 01:58
Valid: false

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 212KB - Virtual size: 585KB

.rsrc
Size: 21KB - Virtual size: 21KB