ab3d74fcca45b359280b2b38e9265af278fdb67f4c8b589a5ebf27dbb85c28f6

Sharing

Copy URL Twitter E-mail

General

Target

ab3d74fcca45b359280b2b38e9265af278fdb67f4c8b589a5ebf27dbb85c28f6
Size

5.8MB
MD5

9be80a2f2bc0cbaf2f83967bd9c89710
SHA1

48bac1332691a6579850ffca21986d921b4b906c
SHA256

ab3d74fcca45b359280b2b38e9265af278fdb67f4c8b589a5ebf27dbb85c28f6
SHA512

28da9bdcd85c040b6846ce7d76ee66cd69ae581f5355749653d170ec78aec8239e2e0aaf194172458cbee76237ce45a1464101ef8f26180c686f37e30f3096c1
SSDEEP

98304:5o3QEqA+nzzzqzzzzzhzzzzzzz1zzzTAkgC9avBTDA2A3xUlReBYDaUKOC+xT:5nJw0hA3xUlRe+

Score

N/A

Malware Config

Signatures

Files

ab3d74fcca45b359280b2b38e9265af278fdb67f4c8b589a5ebf27dbb85c28f6
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

13:49:c0:a6:c1:59:4f:99:34:46:0d:92:c8:11:b4:7c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/02/2020, 00:00

Not After

10/02/2023, 23:59

Subject

CN=NetSpot (Etwok Inc),O=NetSpot (Etwok Inc),POSTALCODE=19901-3618,STREET=Ste 5858+STREET=8 The Green,L=Dover,ST=Delaware,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:e8:72:c1:df:db:45:18:6e:9f:82:66:27:3d:bf:6c:76:26:44:65:c9:90:8a:c6:33:14:da:f5:bb:2f:6d:4d
Signer

Actual PE Digest

55:e8:72:c1:df:db:45:18:6e:9f:82:66:27:3d:bf:6c:76:26:44:65:c9:90:8a:c6:33:14:da:f5:bb:2f:6d:4d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=NetSpot (Etwok Inc),O=NetSpot (Etwok Inc),POSTALCODE=19901-3618,STREET=Ste 5858+STREET=8 The Green,L=Dover,ST=Delaware,C=US

17/11/2020, 09:06
Valid: true

Chain 1

CN=NetSpot (Etwok Inc),O=NetSpot (Etwok Inc),POSTALCODE=19901-3618,STREET=Ste 5858+STREET=8 The Green,L=Dover,ST=Delaware,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

13:49:c0:a6:c1:59:4f:99:34:46:0d:92:c8:11:b4:7cCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

55:e8:72:c1:df:db:45:18:6e:9f:82:66:27:3d:bf:6c:76:26:44:65:c9:90:8a:c6:33:14:da:f5:bb:2f:6d:4dSigner

Signature Validations

Verification

17/11/2020, 09:06 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.7MB - Virtual size: 5.7MB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 12B

13:49:c0:a6:c1:59:4f:99:34:46:0d:92:c8:11:b4:7c
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

55:e8:72:c1:df:db:45:18:6e:9f:82:66:27:3d:bf:6c:76:26:44:65:c9:90:8a:c6:33:14:da:f5:bb:2f:6d:4d
Signer

17/11/2020, 09:06
Valid: true

.text
Size: 5.7MB - Virtual size: 5.7MB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 12B