malware_smoke_3563958347

Sharing

Copy URL Twitter E-mail

General

Target

malware_smoke_3563958347
Size

3.9MB
MD5

00a1e1858578efb3530eeda5e92681be
SHA1

a8f300e9b626f5dbd0c8ba03a2ff53707c5bd6c1
SHA256

e117439ca96e4b65ec9233451276151f4208bd1c45c482d07bbc2e3f79b31116
SHA512

eaba225104f4f72bf687d712edb6fd4869dfcb2b45b3ba3b9c301e81761956edb6d8042cdca80ce7d336e7b8a4fb4fcb458a490ff154363a1d1a5518c6534a6b
SSDEEP

98304:LIbMLu1ZfIH6y5NC1Htn2DtOMZf3hSrzY/3:LIASPwH6ztn2xZfhmY/3

Score

N/A

Malware Config

Signatures

Files

malware_smoke_3563958347
.exe windows x86

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:5f:f5:d7:2b:59:8f:79:25:e0:79:e0:ca:cf:46:56:3a:a0:6c:f4:96:e0:12:06:de:28:b1:29:0a:e9:9c:ff
Signer

Actual PE Digest

5c:5f:f5:d7:2b:59:8f:79:25:e0:79:e0:ca:cf:46:56:3a:a0:6c:f4:96:e0:12:06:de:28:b1:29:0a:e9:9c:ff

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/10/2022, 12:43
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9ZW1lGY
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

5c:5f:f5:d7:2b:59:8f:79:25:e0:79:e0:ca:cf:46:56:3a:a0:6c:f4:96:e0:12:06:de:28:b1:29:0a:e9:9c:ffSigner

Signature Validations

Verification

03/10/2022, 12:43 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size: 95KB

Size: - Virtual size: 145KB

Size: - Virtual size: 63KB

Size: - Virtual size: 7KB

Size: - Virtual size: 1.6MB

Size: 512B - Virtual size: 4KB

Size: 3.6MB - Virtual size: 3.7MB

.rsrc Size: 512B - Virtual size: 104KB

.9ZW1lGY Size: 300KB - Virtual size: 300KB

.adata Size: - Virtual size: 4KB

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

5c:5f:f5:d7:2b:59:8f:79:25:e0:79:e0:ca:cf:46:56:3a:a0:6c:f4:96:e0:12:06:de:28:b1:29:0a:e9:9c:ff
Signer

03/10/2022, 12:43
Valid: false

.rsrc
Size: 512B - Virtual size: 104KB

.9ZW1lGY
Size: 300KB - Virtual size: 300KB

.adata
Size: - Virtual size: 4KB