file | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

file
Size

1.4MB
MD5

4b743ce00d6be4c80149832cf08dee53
SHA1

e1e03b1e788667e8d396a95f4220015445bf40e8
SHA256

1a220e996b525d7eea69b1d127c9a53864c8b279237814b6c53dcf9b5fdf94cd
SHA512

79ed13fbdf15c8c0077d663eb5bc70ffd6e491b5aa774a7bac7d28d593090e78d096d9a2aa3f31ff3ab3acc48b5bed9748f68f74c0bd17ef09e6aa5a9c2da1c7
SSDEEP

24576:niIWK4wpe2SOR2O+QLBT1o40Tpn6w6mosuUNBVsNIcV8wJ:nil2pe2+OhFT1mpDLnOJ

Score

N/A

Malware Config

Signatures

Files

file
.exe windows x64

792183da8e6ab99fdf2cc715092fdf63

Code Sign

54:18:d1:8f:55:08:06:89:4d:6a:45:8c:32:cc:4d:85
Certificate

Issuer

CN=Logitech Z-706 Template NET

Not Before

20-11-2022 19:56

Not After

21-11-2032 19:56

Subject

CN=Logitech Z-706 Template NET

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:ac:f8:88:38:69:f3:48:3f:d9:c9:2d:e5:85:f2:64:5e:07:c8:c7:42:08:51:50:b2:9a:a9:90:10:55:e0:00
Signer

Actual PE Digest

2e:ac:f8:88:38:69:f3:48:3f:d9:c9:2d:e5:85:f2:64:5e:07:c8:c7:42:08:51:50:b2:9a:a9:90:10:55:e0:00

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Logitech Z-706 Template NET

17-11-2022 13:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

DragFinish

mscoree

_CorExeMain

advapi32

RegQueryValueW

user32

GetDlgItem

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

792183da8e6ab99fdf2cc715092fdf63

Code Sign

54:18:d1:8f:55:08:06:89:4d:6a:45:8c:32:cc:4d:85Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

2e:ac:f8:88:38:69:f3:48:3f:d9:c9:2d:e5:85:f2:64:5e:07:c8:c7:42:08:51:50:b2:9a:a9:90:10:55:e0:00Signer

Signature Validations

Verification

17-11-2022 13:15 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 1.2MB

.rsrc Size: 616KB - Virtual size: 616KB

Size: 93KB - Virtual size: 92KB

54:18:d1:8f:55:08:06:89:4d:6a:45:8c:32:cc:4d:85
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

2e:ac:f8:88:38:69:f3:48:3f:d9:c9:2d:e5:85:f2:64:5e:07:c8:c7:42:08:51:50:b2:9a:a9:90:10:55:e0:00
Signer

17-11-2022 13:15
Valid: false

.rsrc
Size: 616KB - Virtual size: 616KB