SecuriteInfo[.]com[.]Variant[.]Lazy[.]241296[.]29864[.]11151[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Lazy.241296.29864.11151.exe
Size

289KB
MD5

30843ff6ff058495df1884a31c153f12
SHA1

6bdb75e3d1a95c66beb369fa9cd316427cc8e8c9
SHA256

f2c121b416fc3e961b271733a3e269b1227d0579676c60da524b80c15dbf33ac
SHA512

c980614ae1b5c1aebb17d98d2b29f79ff39ce193a97959a41239c12322d8fd37722191a66d13446210da2aa230f523c1223f3d5e92f15444ba8c359d38ae2b94
SSDEEP

6144:CHXMvcfk/Smodyjz3d/rs/HigagoHPKBTEwuXtu8ntVRjG:aXMvchvMXgmfHKT/uXtu8nNK

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Lazy.241296.29864.11151.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/01/2022, 19:36

Not After

26/01/2023, 19:36

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:64:f6:e6:b2:f6:87:a7:8c:ba:b8:5a:09:52:96:54:91:31:61:7c:44:ba:6d:87:c3:fe:d9:c5:f0:ff:7f:31
Signer

Actual PE Digest

13:64:f6:e6:b2:f6:87:a7:8c:ba:b8:5a:09:52:96:54:91:31:61:7c:44:ba:6d:87:c3:fe:d9:c5:f0:ff:7f:31

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21/09/2022, 12:01
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9bCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

13:64:f6:e6:b2:f6:87:a7:8c:ba:b8:5a:09:52:96:54:91:31:61:7c:44:ba:6d:87:c3:fe:d9:c5:f0:ff:7f:31Signer

Signature Validations

Verification

21/09/2022, 12:01 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 52KB - Virtual size: 51KB

.sdata Size: 218KB - Virtual size: 218KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:9b:13:02:82:8f:f3:90:4e:d2:00:00:00:00:02:9b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

13:64:f6:e6:b2:f6:87:a7:8c:ba:b8:5a:09:52:96:54:91:31:61:7c:44:ba:6d:87:c3:fe:d9:c5:f0:ff:7f:31
Signer

21/09/2022, 12:01
Valid: false

.text
Size: 52KB - Virtual size: 51KB

.sdata
Size: 218KB - Virtual size: 218KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 12B