SecuriteInfo[.]com[.]Trojan[.]PackedNET[.]1293[.]25944[.]579[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.PackedNET.1293.25944.579.exe
Size

171KB
MD5

3f302c49278e12a784224ab5e843b550
SHA1

ca15f2c458dc63f69d96c9b61437326f8a9f37fd
SHA256

f218fa4276e991739589e3f96b0abc8f53d499b88f2d824beedc01ce49e53bcc
SHA512

edbb3d882dec265c45fe529ea90849ecfa67152a9eb13d108a15dd0f97c0376649d6a0ab65c2745925cd8bc5460c7a5475971e9b7c4408d5be5153cdecad452c
SSDEEP

3072:UWF+Dtae1EdgDt+Tr9lxGs3bRQ1t9VArqOuwBgvuXkJ0eiMNsTEmSHm:UWEDt1Ed28lxGs3bR8t9uBuYgvuXkJX8

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.PackedNET.1293.25944.579.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27-01-2022 19:36

Not After

26-01-2023 19:36

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:2e:9d:9e:fc:de:2c:14:42:4b:a1:a8:db:a3:b2:9a:1d:06:8f:1c:68:5e:0d:0c:c6:f5:2d:c8:1c:08:90:be
Signer

Actual PE Digest

75:2e:9d:9e:fc:de:2c:14:42:4b:a1:a8:db:a3:b2:9a:1d:06:8f:1c:68:5e:0d:0c:c6:f5:2d:c8:1c:08:90:be

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-09-2022 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9bCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

75:2e:9d:9e:fc:de:2c:14:42:4b:a1:a8:db:a3:b2:9a:1d:06:8f:1c:68:5e:0d:0c:c6:f5:2d:c8:1c:08:90:beSigner

Signature Validations

Verification

15-09-2022 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 60KB - Virtual size: 60KB

.sdata Size: 98KB - Virtual size: 98KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

75:2e:9d:9e:fc:de:2c:14:42:4b:a1:a8:db:a3:b2:9a:1d:06:8f:1c:68:5e:0d:0c:c6:f5:2d:c8:1c:08:90:be
Signer

15-09-2022 14:52
Valid: false

.text
Size: 60KB - Virtual size: 60KB

.sdata
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B