PDF DE ARTICULO ACT[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

PDF DE ARTICULO ACT.exe
Size

3.4MB
MD5

67354a1860bc2e6b3ff13f3f7d90343e
SHA1

681da75526970d006bcbcd5fc8c6e222d4b43953
SHA256

46fff582a4bd61053e727f7a77d66eab7a7c536acf3f000ad9c1721ac27949d3
SHA512

eb712361877b34b541ba70bf1899ff48186a8e0c17a0b8730816ab9e7e8c9975cf7d7ad6d26e17598208f224aaa1a87996acc106e36382516c69db2c821ae868
SSDEEP

98304:53coRwOlNGMJilYMLGwxEfBHnj9OB3f3:9coRwOPDJTMqcABHnj9U

Score

N/A

Malware Config

Signatures

Files

PDF DE ARTICULO ACT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22-04-2020 00:00

Not After

22-04-2023 23:59

Subject

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22-04-2020 00:00

Not After

22-04-2023 23:59

Subject

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:50:0a:26:09:22:de:cd:0d:b8:e5:77:47:e4:b1:92:74:c2:02:02:35:4a:d3:ad:ed:3f:8b:b1:6b:28:3c:fe
Signer

Actual PE Digest

49:50:0a:26:09:22:de:cd:0d:b8:e5:77:47:e4:b1:92:74:c2:02:02:35:4a:d3:ad:ed:3f:8b:b1:6b:28:3c:fe

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

22-09-2022 18:57
Valid: true

Chain 1

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

29:89:cd:b4:10:85:e3:b5:09:d9:50:cd:65:ca:0a:dd:8b:12:fb:6e
Signer

Actual PE Digest

29:89:cd:b4:10:85:e3:b5:09:d9:50:cd:65:ca:0a:dd:8b:12:fb:6e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

10-08-2022 07:02
Valid: true

Chain 1

CN=CHENGBU TURING SOFTWARE CO.\, LTD,O=CHENGBU TURING SOFTWARE CO.\, LTD,POSTALCODE=422599,STREET=XIAO GUI HUA HOUSE\,OCTAGONAL PAVILION SOUTH\, RUILIN TOWN\, CHENGBU COUNTY,L=Shaoyang,ST=Hunan,C=CN

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

49:50:0a:26:09:22:de:cd:0d:b8:e5:77:47:e4:b1:92:74:c2:02:02:35:4a:d3:ad:ed:3f:8b:b1:6b:28:3c:feSigner

Signature Validations

Verification

22-09-2022 18:57 Valid: true

Chain 1

29:89:cd:b4:10:85:e3:b5:09:d9:50:cd:65:ca:0a:dd:8b:12:fb:6eSigner

Signature Validations

Verification

10-08-2022 07:02 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rsrc Size: 283KB - Virtual size: 283KB

.reloc Size: 512B - Virtual size: 12B

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

bd:3a:0b:5a:30:2f:92:e3:4d:44:af:aa:05:ef:37:93
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

49:50:0a:26:09:22:de:cd:0d:b8:e5:77:47:e4:b1:92:74:c2:02:02:35:4a:d3:ad:ed:3f:8b:b1:6b:28:3c:fe
Signer

22-09-2022 18:57
Valid: true

29:89:cd:b4:10:85:e3:b5:09:d9:50:cd:65:ca:0a:dd:8b:12:fb:6e
Signer

10-08-2022 07:02
Valid: true

.text
Size: 3.1MB - Virtual size: 3.1MB

.rsrc
Size: 283KB - Virtual size: 283KB

.reloc
Size: 512B - Virtual size: 12B