d217c9511ff7d17deea29673b97bfa2e40740ff2649b89883a1c0cd1be51df05

Sharing

Copy URL Twitter E-mail

General

Target

d217c9511ff7d17deea29673b97bfa2e40740ff2649b89883a1c0cd1be51df05
Size

2.5MB
MD5

008680d8292241a7924c417d0e649512
SHA1

d987d49a01e4cdaa379b7a72b5731a295e94e7a9
SHA256

d217c9511ff7d17deea29673b97bfa2e40740ff2649b89883a1c0cd1be51df05
SHA512

6417485c6046b6e3c3a472748d425aec3708a73871bd64266bcd9576887a4b827631fded85ac11cfab3177b2e4b13229401555129cdae12e5900325b537b1704
SSDEEP

24576:nEZ+P5FGyIwWaCddVBP7QzT+AQPRgSiM3KggoiVFHkJNMEzN/7WvakOmv9egI8FE:nEZ+PCyIM8VlP3hkH8VPWAn/V3

Score

N/A

Malware Config

Signatures

Files

d217c9511ff7d17deea29673b97bfa2e40740ff2649b89883a1c0cd1be51df05
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/12/2021, 06:38

Not After

12/12/2024, 06:38

Subject

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4f:ad:f5:ea:5d:18:b7:b5:85:4a:b6:f1:35:c6:dd:15:23:f9:1c:ec:33:ac:ba:33:f1:11:68:0d:17:3a:dd:2f
Signer

Actual PE Digest

4f:ad:f5:ea:5d:18:b7:b5:85:4a:b6:f1:35:c6:dd:15:23:f9:1c:ec:33:ac:ba:33:f1:11:68:0d:17:3a:dd:2f

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

02/11/2022, 14:01
Valid: true

Chain 1

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Chain 2

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Sd24:
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44Certificate

Extended Key Usages

Key Usages

4f:ad:f5:ea:5d:18:b7:b5:85:4a:b6:f1:35:c6:dd:15:23:f9:1c:ec:33:ac:ba:33:f1:11:68:0d:17:3a:dd:2fSigner

Signature Validations

Verification

02/11/2022, 14:01 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

S d24: Size: 362KB - Virtual size: 362KB

.text Size: 2.2MB - Virtual size: 2.2MB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

4f:ad:f5:ea:5d:18:b7:b5:85:4a:b6:f1:35:c6:dd:15:23:f9:1c:ec:33:ac:ba:33:f1:11:68:0d:17:3a:dd:2f
Signer

02/11/2022, 14:01
Valid: true

Sd24:
Size: 362KB - Virtual size: 362KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B