6c36b5b001be75a5ec413a67900bc4657fd692396f0f6fde73ef39f4ef26b524

Sharing

Copy URL Twitter E-mail

General

Target

6c36b5b001be75a5ec413a67900bc4657fd692396f0f6fde73ef39f4ef26b524
Size

1.3MB
MD5

ffe5b9c70a0270ad64b55b0839a66c3b
SHA1

c7b48e478aaa1405c510f2d1e06962affbba85cc
SHA256

6c36b5b001be75a5ec413a67900bc4657fd692396f0f6fde73ef39f4ef26b524
SHA512

d80b177e474c377c2b6f33e8562f0e085509e101ee2ebd8fc01b9868c98e3f382a7ec52bd15d41b66ba10fcf2972685fe7d5be0e08f98ea67ecef0a551c3c4d4
SSDEEP

24576:e0svZ/xyacYaNxZyPg5EkTAuKwk2NVAPeV3mW7WIvup7A1Cp:e5BxrA62VV3mWyPeK

Score

N/A

Malware Config

Signatures

Files

6c36b5b001be75a5ec413a67900bc4657fd692396f0f6fde73ef39f4ef26b524
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/12/2021, 06:38

Not After

12/12/2024, 06:38

Subject

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:36:05:d0:bc:9c:a9:a8:f4:35:0d:88:36:b1:99:1d:42:41:0e:f5:a6:86:d9:f5:69:83:18:65:94:f8:9b:68
Signer

Actual PE Digest

44:36:05:d0:bc:9c:a9:a8:f4:35:0d:88:36:b1:99:1d:42:41:0e:f5:a6:86:d9:f5:69:83:18:65:94:f8:9b:68

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

04/11/2022, 15:41
Valid: true

Chain 1

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Chain 2

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.\: te
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44Certificate

Extended Key Usages

Key Usages

44:36:05:d0:bc:9c:a9:a8:f4:35:0d:88:36:b1:99:1d:42:41:0e:f5:a6:86:d9:f5:69:83:18:65:94:f8:9b:68Signer

Signature Validations

Verification

04/11/2022, 15:41 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.\: te Size: 188KB - Virtual size: 187KB

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

44:36:05:d0:bc:9c:a9:a8:f4:35:0d:88:36:b1:99:1d:42:41:0e:f5:a6:86:d9:f5:69:83:18:65:94:f8:9b:68
Signer

04/11/2022, 15:41
Valid: true

.\: te
Size: 188KB - Virtual size: 187KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B