ab55921f79589ac181c0058026053ae90c2eaf5714db33f1d979c258d9b3b164

Sharing

Copy URL Twitter E-mail

General

Target

ab55921f79589ac181c0058026053ae90c2eaf5714db33f1d979c258d9b3b164
Size

302KB
MD5

2e0123d8b8f81493f83d50749c59560e
SHA1

6c658e2dd6f3a00d09338f1f402e06f12c3afc26
SHA256

ab55921f79589ac181c0058026053ae90c2eaf5714db33f1d979c258d9b3b164
SHA512

da9e103d8ec1b0b0441db499f57092185c3a0d0efebd32fc68a2d3b4b7de301bb60150e0b59f9f9dde5c8f2aed10e7a2ccd6d4e231cdc57d18cb77d6c8db6114
SSDEEP

6144:l+LjhEB1aWggNOpqY8zzBZ9iEVXZZNTlCdXxiINFYp:l+Llmdgg4nyXZZZNT6hXq

Score

N/A

Malware Config

Signatures

Files

ab55921f79589ac181c0058026053ae90c2eaf5714db33f1d979c258d9b3b164
.exe windows x86

8ffc31bccd11f7f873be952d93bdc291

Code Sign

09:a9:28:ef:40:e9:e8:74:18:14:7e:26:39:36:2a:6e
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2013, 00:00

Not After

15/05/2014, 12:00

Subject

CN=Awimba LLC,O=Awimba LLC,L=Wilmington,ST=Delaware,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a2:77:19:32:83:b0:3e:be:bf:ec:a1:29:5f:1f:42:f2:d5:99:f7:1e
Signer

Actual PE Digest

a2:77:19:32:83:b0:3e:be:bf:ec:a1:29:5f:1f:42:f2:d5:99:f7:1e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Awimba LLC,O=Awimba LLC,L=Wilmington,ST=Delaware,C=US

04/11/2022, 15:41
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 289KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ffc31bccd11f7f873be952d93bdc291

Code Sign

09:a9:28:ef:40:e9:e8:74:18:14:7e:26:39:36:2a:6eCertificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

a2:77:19:32:83:b0:3e:be:bf:ec:a1:29:5f:1f:42:f2:d5:99:f7:1eSigner

Signature Validations

Verification

04/11/2022, 15:41 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

oleaut32

mscoree

Sections

.text Size: 289KB - Virtual size: 776KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 512B

09:a9:28:ef:40:e9:e8:74:18:14:7e:26:39:36:2a:6e
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

a2:77:19:32:83:b0:3e:be:bf:ec:a1:29:5f:1f:42:f2:d5:99:f7:1e
Signer

04/11/2022, 15:41
Valid: false

.text
Size: 289KB - Virtual size: 776KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 512B