166af3429b6d9a81fbb537849190190516596c0c4a44be03728a408003039d82

Sharing

Copy URL

Twitter E-mail

General

Target

166af3429b6d9a81fbb537849190190516596c0c4a44be03728a408003039d82
Size

519KB
MD5

0cc25540c7ea712231dfaa165733b316
SHA1

2c4398ac4c7e4ea2605a7f9cd96b8c15db743e35
SHA256

166af3429b6d9a81fbb537849190190516596c0c4a44be03728a408003039d82
SHA512

34d25b55546e242e5940ee7c891fb37b2ad257a06b91d87e56e47385495ec45386accfb91d405cedd673b4507ede392b3533b1a218a94e90adcfcf432c697eb4
SSDEEP

12288:+7Y8K9sEmAT2y/BAnHOZixIEjEmcEjElXs6Oj6EjE47AoKnWXyz2LRsYQG9e8NaN:H1+VC7b/lMh6QU9xTV

Score

N/A

Malware Config

Signatures

Files

166af3429b6d9a81fbb537849190190516596c0c4a44be03728a408003039d82
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:fc:a0:e2:4f:d0:dc:19:5a:3a:00:00:00:00:00:fc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-08-2018 20:20

Not After

23-11-2019 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:5b:35:12:ef:3e:00:6d:5f:cf:aa:f9:2d:48:69:72:db:d5:82:9e:ae:fd:0c:c5:6d:c6:c5:27:55:54:a0:c5
Signer

Actual PE Digest

61:5b:35:12:ef:3e:00:6d:5f:cf:aa:f9:2d:48:69:72:db:d5:82:9e:ae:fd:0c:c5:6d:c6:c5:27:55:54:a0:c5

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

23-09-2022 10:49
Valid: false

23:bd:d7:bd:fd:db:61:7d:87:4b:75:e5:d5:79:9a:d2:ec:6e:93:c4
Signer

Actual PE Digest

23:bd:d7:bd:fd:db:61:7d:87:4b:75:e5:d5:79:9a:d2:ec:6e:93:c4

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

25-07-2019 02:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:fc:a0:e2:4f:d0:dc:19:5a:3a:00:00:00:00:00:fcCertificate

Extended Key Usages

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

61:5b:35:12:ef:3e:00:6d:5f:cf:aa:f9:2d:48:69:72:db:d5:82:9e:ae:fd:0c:c5:6d:c6:c5:27:55:54:a0:c5Signer

Signature Validations

Verification

23-09-2022 10:49 Valid: false

23:bd:d7:bd:fd:db:61:7d:87:4b:75:e5:d5:79:9a:d2:ec:6e:93:c4Signer

Signature Validations

Verification

25-07-2019 02:45 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 441KB - Virtual size: 441KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:fc:a0:e2:4f:d0:dc:19:5a:3a:00:00:00:00:00:fc
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

61:5b:35:12:ef:3e:00:6d:5f:cf:aa:f9:2d:48:69:72:db:d5:82:9e:ae:fd:0c:c5:6d:c6:c5:27:55:54:a0:c5
Signer

23-09-2022 10:49
Valid: false

23:bd:d7:bd:fd:db:61:7d:87:4b:75:e5:d5:79:9a:d2:ec:6e:93:c4
Signer

25-07-2019 02:45
Valid: false

.text
Size: 441KB - Virtual size: 441KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 512B - Virtual size: 12B