Order 84889-CVE2-52022, pdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Order 84889-CVE2-52022, pdf.exe
Size

325KB
MD5

2834713b8cb6ac2f5e81ddd511129842
SHA1

c78ab50934d4534957a5dcb3867693605ed0e201
SHA256

31361887717409de593db019ad4f17e9d8bdad5f1ae601d63709494d10d5f7e8
SHA512

a39519e6a62d2fe85791c499c6e7fc58506870f2d785dce15e57348e1f5987e81e2bf2e7036b17d092ffec244a33a2b73c342600050737c4c2f4c7589ff996df
SSDEEP

6144:HpHUmTz5JwcOHRsO9NZrZStpSzSQDfWv/GAVVgSjhbNdbyCg9ZB4ESQ7F2gUju+7:xT9JwccR9NyLCSQDfWXfvbNdmsESQ7oz

Score

N/A

Malware Config

Signatures

Files

Order 84889-CVE2-52022, pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/01/2022, 19:36

Not After

26/01/2023, 19:36

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:60:b2:62:c2:e5:d6:e8:5a:ad:05:3a:92:ff:3f:23:c9:bd:6e:c5:c4:b9:f6:f7:8c:64:33:fd:d9:28:91:98
Signer

Actual PE Digest

4d:60:b2:62:c2:e5:d6:e8:5a:ad:05:3a:92:ff:3f:23:c9:bd:6e:c5:c4:b9:f6:f7:8c:64:33:fd:d9:28:91:98

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/09/2022, 14:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

V7\*+]1B
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9bCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

4d:60:b2:62:c2:e5:d6:e8:5a:ad:05:3a:92:ff:3f:23:c9:bd:6e:c5:c4:b9:f6:f7:8c:64:33:fd:d9:28:91:98Signer

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

V7\*+]1B Size: 277KB - Virtual size: 276KB

.text Size: 29KB - Virtual size: 29KB

.rsrc Size: 7KB - Virtual size: 6KB

Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4d:60:b2:62:c2:e5:d6:e8:5a:ad:05:3a:92:ff:3f:23:c9:bd:6e:c5:c4:b9:f6:f7:8c:64:33:fd:d9:28:91:98
Signer

15/09/2022, 14:53
Valid: false

V7\*+]1B
Size: 277KB - Virtual size: 276KB

.text
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 12B