9b6fe5d7701c5d8719df6a09732140f9beff86c2dfde5ce59e59e6dcf5051620

Sharing

Copy URL Twitter E-mail

General

Target

9b6fe5d7701c5d8719df6a09732140f9beff86c2dfde5ce59e59e6dcf5051620
Size

9.8MB
MD5

6f37b447a3ba835233fe2e6d79213c02
SHA1

e8f11da30e66bc24a41b6cde64f6318726616cb1
SHA256

9b6fe5d7701c5d8719df6a09732140f9beff86c2dfde5ce59e59e6dcf5051620
SHA512

a4867dbe1b63dd087e67db54ebd3765e880601503d8ff99fcac565865d6797fe237a554a7c360467755574613acfd49b6fe2684dc452f9962786135ccdceb929
SSDEEP

196608:hzXs1geDPkdrIEnJ4JDjAPHew+t3ceLnWQBzZuTCYiuAYme+k1:CGE9lAPHejcPYzZZhJYme+k

Score

N/A

Malware Config

Signatures

Files

9b6fe5d7701c5d8719df6a09732140f9beff86c2dfde5ce59e59e6dcf5051620
.exe windows x64

dc12932426806b6b47a373d7ae42c21d

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:38:d7:d9:5e:af:4f:38:68:15:72:22:42:c7:19:21:81:95:08:61:eb:f7:1d:7a:f4:33:77:b8:53:d3:20:64
Signer

Actual PE Digest

dc:38:d7:d9:5e:af:4f:38:68:15:72:22:42:c7:19:21:81:95:08:61:eb:f7:1d:7a:f4:33:77:b8:53:d3:20:64

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

24/10/2022, 15:47
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

mscoree

_CorExeMain

Sections

Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ytbcszwl
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mfmhpqfr
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc12932426806b6b47a373d7ae42c21d

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

dc:38:d7:d9:5e:af:4f:38:68:15:72:22:42:c7:19:21:81:95:08:61:eb:f7:1d:7a:f4:33:77:b8:53:d3:20:64Signer

Signature Validations

Verification

24/10/2022, 15:47 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mscoree

Sections

Size: 7.5MB - Virtual size: 7.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.idata Size: 512B - Virtual size: 8KB

ytbcszwl Size: 2.3MB - Virtual size: 2.3MB

mfmhpqfr Size: 512B - Virtual size: 8KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

dc:38:d7:d9:5e:af:4f:38:68:15:72:22:42:c7:19:21:81:95:08:61:eb:f7:1d:7a:f4:33:77:b8:53:d3:20:64
Signer

24/10/2022, 15:47
Valid: false

.rsrc
Size: 1KB - Virtual size: 1KB

.idata
Size: 512B - Virtual size: 8KB

ytbcszwl
Size: 2.3MB - Virtual size: 2.3MB

mfmhpqfr
Size: 512B - Virtual size: 8KB