ab81ce971d3f8a359019a6d0a4206cb0357603284b54201dc0cc2c18d380be68

Sharing

Copy URL Twitter E-mail

General

Target

ab81ce971d3f8a359019a6d0a4206cb0357603284b54201dc0cc2c18d380be68
Size

1.6MB
MD5

922dd576e2920439cd1f34af422b4d3e
SHA1

d4df0b9bb0d03eef8d0da4319fcd0f55307ed4d0
SHA256

ab81ce971d3f8a359019a6d0a4206cb0357603284b54201dc0cc2c18d380be68
SHA512

08af8d7d61a5b72a871d52010b08789c2087244704ca37ace1a7a7d96a87a5fab4688e5a36cfb653347cd73738bac12ba3828ddcece18b2abf6916b0cf2a24f5
SSDEEP

24576:EM/9NQrDFdUHFLWFHoFAsaJNgxapCnx0W:8F6HooFAbgxapCnxD

Score

N/A

Malware Config

Signatures

Files

ab81ce971d3f8a359019a6d0a4206cb0357603284b54201dc0cc2c18d380be68
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:53:c0:d0:a2:68:46:fe:20:74:8a:3f:a1:31:62:51
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/10/2019, 00:00

Not After

25/01/2023, 12:00

Subject

CN=Drake Enterprises\, LTD.,O=Drake Enterprises\, LTD.,L=Franklin,ST=North Carolina,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:2b:09:d5:8a:6b:cd:f1:c6:94:43:bd:a4:2e:9a:c0:3d:81:e8:f7:d6:69:8b:f5:44:4b:e4:d5:b0:18:bc:99
Signer

Actual PE Digest

5b:2b:09:d5:8a:6b:cd:f1:c6:94:43:bd:a4:2e:9a:c0:3d:81:e8:f7:d6:69:8b:f5:44:4b:e4:d5:b0:18:bc:99

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Drake Enterprises\, LTD.,O=Drake Enterprises\, LTD.,L=Franklin,ST=North Carolina,C=US

25/01/2020, 18:13
Valid: true

Chain 1

CN=Drake Enterprises\, LTD.,O=Drake Enterprises\, LTD.,L=Franklin,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

05:53:c0:d0:a2:68:46:fe:20:74:8a:3f:a1:31:62:51Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

5b:2b:09:d5:8a:6b:cd:f1:c6:94:43:bd:a4:2e:9a:c0:3d:81:e8:f7:d6:69:8b:f5:44:4b:e4:d5:b0:18:bc:99Signer

Signature Validations

Verification

25/01/2020, 18:13 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 480KB - Virtual size: 479KB

.reloc Size: 512B - Virtual size: 12B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

05:53:c0:d0:a2:68:46:fe:20:74:8a:3f:a1:31:62:51
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

5b:2b:09:d5:8a:6b:cd:f1:c6:94:43:bd:a4:2e:9a:c0:3d:81:e8:f7:d6:69:8b:f5:44:4b:e4:d5:b0:18:bc:99
Signer

25/01/2020, 18:13
Valid: true

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 480KB - Virtual size: 479KB

.reloc
Size: 512B - Virtual size: 12B