a07762926413974d6a5e39c3a5a467cf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a07762926413974d6a5e39c3a5a467cf.exe
Size

3.2MB
MD5

a07762926413974d6a5e39c3a5a467cf
SHA1

990342a8b43de620c0a6baee95994e3b873d385b
SHA256

8c7e227bdb4c0b55dfd41b29614bd1b852132c65ec90a564ebf67230d421abc8
SHA512

82ec4ac72be8f315e94d874ecc23889a2e739b97b8a635aed2d661a5b7db9ed3798206266ac61ee66976ddb000b6e526e1ae5ae249fbc2048d6ec57e318b9580
SSDEEP

98304:NTXOzoDogs+olWgAS/mPl1GdNtLnWbmJ3x3CAzEyU4eC:NT92rp/mPn6tybm2q2C

Score

N/A

Malware Config

Signatures

Files

a07762926413974d6a5e39c3a5a467cf.exe
.exe windows x86

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:c2:75:00:92:82:6f:19:be:1a:fd:8a
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

14/08/2019, 08:25

Not After

26/09/2022, 13:54

Subject

SERIALNUMBER=27168581,CN=Locktime Software s.r.o.,O=Locktime Software s.r.o.,STREET=Chudenicka 1059/30\, Hostivar,L=Prague,ST=Prague,C=CZ,1.3.6.1.4.1.311.60.2.1.3=#1302435a,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:45:0a:ff:83:66:fd:0d:5f:7e:79:16:fd:59:c7:0c:e0:2d:4e:86:d9:00:bd:d5:76:f6:05:2d:5f:82:55:a8
Signer

Actual PE Digest

33:45:0a:ff:83:66:fd:0d:5f:7e:79:16:fd:59:c7:0c:e0:2d:4e:86:d9:00:bd:d5:76:f6:05:2d:5f:82:55:a8

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=27168581,CN=Locktime Software s.r.o.,O=Locktime Software s.r.o.,STREET=Chudenicka 1059/30\, Hostivar,L=Prague,ST=Prague,C=CZ,1.3.6.1.4.1.311.60.2.1.3=#1302435a,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

26/10/2021, 22:52
Valid: true

Chain 1

SERIALNUMBER=27168581,CN=Locktime Software s.r.o.,O=Locktime Software s.r.o.,STREET=Chudenicka 1059/30\, Hostivar,L=Prague,ST=Prague,C=CZ,1.3.6.1.4.1.311.60.2.1.3=#1302435a,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 2.1MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 174KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 911KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

7f:c2:75:00:92:82:6f:19:be:1a:fd:8aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

33:45:0a:ff:83:66:fd:0d:5f:7e:79:16:fd:59:c7:0c:e0:2d:4e:86:d9:00:bd:d5:76:f6:05:2d:5f:82:55:a8Signer

Signature Validations

Verification

26/10/2021, 22:52 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

Size: 2.1MB - Virtual size: 2.3MB

Size: 3KB - Virtual size: 16KB

Size: - Virtual size: 8KB

Size: 512B - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 8KB

Size: 174KB - Virtual size: 2.5MB

.data Size: 911KB - Virtual size: 912KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

7f:c2:75:00:92:82:6f:19:be:1a:fd:8a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

33:45:0a:ff:83:66:fd:0d:5f:7e:79:16:fd:59:c7:0c:e0:2d:4e:86:d9:00:bd:d5:76:f6:05:2d:5f:82:55:a8
Signer

26/10/2021, 22:52
Valid: true

.rsrc
Size: 1024B - Virtual size: 8KB

.data
Size: 911KB - Virtual size: 912KB