General

Malware Config

Signatures

Files

• Radicado generado relacionado F.-0932 Sept 2022.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Code Sign

  6b:d5:c8:43:56:56:77:6b:bd:09:8e:fa:cc:34:aa:b8

  Certificate

  Issuer

  CN=aaflalo.me

  Not Before

  22-08-2015 21:00

  Not After

  31-12-2024 21:00

  Subject

  CN=SoundSwitch

  Extended Key Usages

  ExtKeyUsageCodeSigning

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  4a:e1:49:86:36:ca:91:ea:6e:d5:51:b9:33:ea:24:aa

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  20-06-2022 05:07

  Not After

  20-06-2023 05:07

  Subject

  CN=Open Source Developer\, Antoine Aflalo,O=Open Source Developer,ST=Quebec,C=CA,1.2.840.113549.1.9.1=#0c16736f756e64737769746368406161666c616c6f2e6d65

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  aa:68:13:ce:6e:c8:8e:88:d4:6a:a3:b1:d7:d5:c9:81:d6:69:75:dc:c4:ad:92:de:bf:d8:0f:be:2d:33:82:21

  Signer

  Actual PE Digest

  aa:68:13:ce:6e:c8:8e:88:d4:6a:a3:b1:d7:d5:c9:81:d6:69:75:dc:c4:ad:92:de:bf:d8:0f:be:2d:33:82:21

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Open Source Developer\, Antoine Aflalo,O=Open Source Developer,ST=Quebec,C=CA,1.2.840.113549.1.9.1=#0c16736f756e64737769746368406161666c616c6f2e6d65

  09-08-2022 00:36

  Valid: true

  Chain 1

  CN=Open Source Developer\, Antoine Aflalo,O=Open Source Developer,ST=Quebec,C=CA,1.2.840.113549.1.9.1=#0c16736f756e64737769746368406161666c616c6f2e6d65

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  aa:68:13:ce:6e:c8:8e:88:d4:6a:a3:b1:d7:d5:c9:81:d6:69:75:dc:c4:ad:92:de:bf:d8:0f:be:2d:33:82:21

  Signer

  Actual PE Digest

  aa:68:13:ce:6e:c8:8e:88:d4:6a:a3:b1:d7:d5:c9:81:d6:69:75:dc:c4:ad:92:de:bf:d8:0f:be:2d:33:82:21

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=SoundSwitch

  09-08-2022 00:36

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 136KB - Virtual size: 136KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ