d88d2a192621cec08faa2602f5d5eaec1b0f958594ab6126aa487164c7004305

Sharing

Copy URL Twitter E-mail

General

Target

d88d2a192621cec08faa2602f5d5eaec1b0f958594ab6126aa487164c7004305
Size

328KB
MD5

6ecc00fb0104d60b615e7473d51e3362
SHA1

4197b55d6abf85e2bd591d50561eb29c7d9a2c8d
SHA256

d88d2a192621cec08faa2602f5d5eaec1b0f958594ab6126aa487164c7004305
SHA512

3cc8da71a97f29ea980b5950da62563782b7cc58259f86cdf6c6b530248cf79d789f23f3b554fe88fdb7125f43bae7a288bdc8609c3041e67f79b2a59a1fd526
SSDEEP

6144:OIWbEGsxdTGzTb1P6LG/J9hS14sCIFQwaEyUNxYrYBei6C3Ybt:OISEGsx68LG/J9h1sQuxYrQUCot

Score

N/A

Malware Config

Signatures

Files

d88d2a192621cec08faa2602f5d5eaec1b0f958594ab6126aa487164c7004305
.exe windows x86

8ffc31bccd11f7f873be952d93bdc291

Code Sign

06:fd:35:65:84:cb:f7:1b:04:a7:af:e7:90:a2:32:9f
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/06/2013, 00:00

Not After

20/08/2014, 12:00

Subject

CN=Tuguu Israel Ltd,O=Tuguu Israel Ltd,L=RAMAT GAN,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:74:a2:8f:85:25:48:ac:a7:da:4b:33:40:4f:c1:a7:f6:f5:a2:18
Signer

Actual PE Digest

4e:74:a2:8f:85:25:48:ac:a7:da:4b:33:40:4f:c1:a7:f6:f5:a2:18

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Tuguu Israel Ltd,O=Tuguu Israel Ltd,L=RAMAT GAN,C=IL

28/10/2022, 15:07
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 227KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ffc31bccd11f7f873be952d93bdc291

Code Sign

06:fd:35:65:84:cb:f7:1b:04:a7:af:e7:90:a2:32:9fCertificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

4e:74:a2:8f:85:25:48:ac:a7:da:4b:33:40:4f:c1:a7:f6:f5:a2:18Signer

Signature Validations

Verification

28/10/2022, 15:07 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

oleaut32

mscoree

Sections

.text Size: 227KB - Virtual size: 736KB

.rsrc Size: 94KB - Virtual size: 96KB

.reloc Size: 512B - Virtual size: 512B

06:fd:35:65:84:cb:f7:1b:04:a7:af:e7:90:a2:32:9f
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

4e:74:a2:8f:85:25:48:ac:a7:da:4b:33:40:4f:c1:a7:f6:f5:a2:18
Signer

28/10/2022, 15:07
Valid: false

.text
Size: 227KB - Virtual size: 736KB

.rsrc
Size: 94KB - Virtual size: 96KB

.reloc
Size: 512B - Virtual size: 512B