ee99c25745537410fd47bcb1650c86196ada6d605177f4e96577cca5a3dc0d6c

Sharing

Copy URL Twitter E-mail

General

Target

ee99c25745537410fd47bcb1650c86196ada6d605177f4e96577cca5a3dc0d6c
Size

401KB
MD5

912f865480dc2f43c553b311bc56a7c4
SHA1

ee3fe8d832d55ed7c81d1501b30a96dcee6a6ea1
SHA256

ee99c25745537410fd47bcb1650c86196ada6d605177f4e96577cca5a3dc0d6c
SHA512

975f01767ca2521897fc686e1a598ebfdb2f37e8ae90515b31d41d43ce4974ca0e0944299112e8899fab19dbfb57090c5c3690b208e58daf37c9752e7ec315f0
SSDEEP

6144:jBCvgXxu/wQcyd9N81X06hVJp3h1mI+jinpdbHP80h/eLYXg7c+E:FCvgv5ONck6JpImHk5YXQg

Score

N/A

Malware Config

Signatures

Files

ee99c25745537410fd47bcb1650c86196ada6d605177f4e96577cca5a3dc0d6c
.exe windows x64

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:30

Not After

03/03/2021, 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:35:42:c8:65:63:c1:55:7d:ff:50:ed:59:e2:83:0b:54:a0:53:45:a1:c0:38:75:3e:31:82:af:b6:69:77:3f
Signer

Actual PE Digest

5d:35:42:c8:65:63:c1:55:7d:ff:50:ed:59:e2:83:0b:54:a0:53:45:a1:c0:38:75:3e:31:82:af:b6:69:77:3f

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/09/2022, 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

5d:35:42:c8:65:63:c1:55:7d:ff:50:ed:59:e2:83:0b:54:a0:53:45:a1:c0:38:75:3e:31:82:af:b6:69:77:3fSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 390KB - Virtual size: 389KB

.rsrc Size: 1KB - Virtual size: 1KB

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

5d:35:42:c8:65:63:c1:55:7d:ff:50:ed:59:e2:83:0b:54:a0:53:45:a1:c0:38:75:3e:31:82:af:b6:69:77:3f
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 390KB - Virtual size: 389KB

.rsrc
Size: 1KB - Virtual size: 1KB