bf0d0ee79cab6aa3af79e2df883afe0c974aece3c5863c04f28d080cba8783a9

Sharing

Copy URL Twitter E-mail

General

Target

bf0d0ee79cab6aa3af79e2df883afe0c974aece3c5863c04f28d080cba8783a9
Size

1.3MB
MD5

4fe3f64abc549a47ad38f3f683bf750c
SHA1

5dbbdc94ae87977bd3ec5305b2ee94c65315b5df
SHA256

bf0d0ee79cab6aa3af79e2df883afe0c974aece3c5863c04f28d080cba8783a9
SHA512

d671f9ddf1a05efc9b7e9afb75d5aeccc2b80937f3134fc501ada4c5cf7c99adf1d61ce64fad9c8cd90ae9ed8dfe86b16b60b37595810f52ac49d30c9670b55e
SSDEEP

24576:e0svZ/xyacYauMZyPg5EkTAuKwk2NVAPeV3mW7WIvup7A1Cp:e5BxvA62VV3mWyPeK

Score

N/A

Malware Config

Signatures

Files

bf0d0ee79cab6aa3af79e2df883afe0c974aece3c5863c04f28d080cba8783a9
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/12/2021, 06:38

Not After

12/12/2024, 06:38

Subject

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

47:5d:0e:9c:73:6b:1c:48:9f:37:df:f3:3f:73:11:54:a0:7f:57:a5:a5:f4:e3:8b:08:b7:7b:6c:b5:90:9c:7c
Signer

Actual PE Digest

47:5d:0e:9c:73:6b:1c:48:9f:37:df:f3:3f:73:11:54:a0:7f:57:a5:a5:f4:e3:8b:08:b7:7b:6c:b5:90:9c:7c

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

04/11/2022, 15:41
Valid: true

Chain 1

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Chain 2

CN=Riftcat Sp. z o. o.,O=Riftcat Sp. z o. o.,L=Białystok,ST=podlaskie,C=PL,1.2.840.113549.1.9.1=#0c14736563757269747940726966746361742e636f6d

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.\: te
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44Certificate

Extended Key Usages

Key Usages

47:5d:0e:9c:73:6b:1c:48:9f:37:df:f3:3f:73:11:54:a0:7f:57:a5:a5:f4:e3:8b:08:b7:7b:6c:b5:90:9c:7cSigner

Signature Validations

Verification

04/11/2022, 15:41 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.\: te Size: 188KB - Virtual size: 187KB

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

27:8c:19:2d:90:18:41:37:56:53:05:83:9c:2f:77:44
Certificate

47:5d:0e:9c:73:6b:1c:48:9f:37:df:f3:3f:73:11:54:a0:7f:57:a5:a5:f4:e3:8b:08:b7:7b:6c:b5:90:9c:7c
Signer

04/11/2022, 15:41
Valid: true

.\: te
Size: 188KB - Virtual size: 187KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B