adfac9c592b7d7bd0950cb1d0d4e8c31e0853d41f95659a0f92c4324e448a98e

Sharing

Copy URL Twitter E-mail

General

Target

adfac9c592b7d7bd0950cb1d0d4e8c31e0853d41f95659a0f92c4324e448a98e
Size

1.2MB
MD5

a8153f3dcaf1bea00c27d89ce189377b
SHA1

1ee4e4667843440bbb2b7a4d27b6133c4abd0fdc
SHA256

adfac9c592b7d7bd0950cb1d0d4e8c31e0853d41f95659a0f92c4324e448a98e
SHA512

b0a1dff3be3495c3da36b84a23af3425fa5926d45d54b891511440ab4da64d4b6a1b748f57957af37790f550f30a578742c79d2645b9859c060655f92c01bd81
SSDEEP

24576:q0UL0TQS274U3cQ1Usp0vvnDCPbEEB3vG:q0007hU3asovnWTLxG

Score

N/A

Malware Config

Signatures

Files

adfac9c592b7d7bd0950cb1d0d4e8c31e0853d41f95659a0f92c4324e448a98e
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/07/2014, 20:32

Not After

01/10/2015, 20:32

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:bb:45:9e:54:71:53:12:7b:d1:0c:26:37:6a:0a:23:6b:40:9b:3e:fd:4b:6a:a1:ad:30:a0:ea:b6:37:24:e4
Signer

Actual PE Digest

59:bb:45:9e:54:71:53:12:7b:d1:0c:26:37:6a:0a:23:6b:40:9b:3e:fd:4b:6a:a1:ad:30:a0:ea:b6:37:24:e4

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

29/09/2022, 18:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

59:bb:45:9e:54:71:53:12:7b:d1:0c:26:37:6a:0a:23:6b:40:9b:3e:fd:4b:6a:a1:ad:30:a0:ea:b6:37:24:e4Signer

Signature Validations

Verification

29/09/2022, 18:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

59:bb:45:9e:54:71:53:12:7b:d1:0c:26:37:6a:0a:23:6b:40:9b:3e:fd:4b:6a:a1:ad:30:a0:ea:b6:37:24:e4
Signer

29/09/2022, 18:53
Valid: false

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B