3F2E1E8605555887C891DBDD6B19A34327464F43F23A8[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

3F2E1E8605555887C891DBDD6B19A34327464F43F23A8.exe
Size

16.9MB
MD5

3a65450749fdcfbd3899d81b737d71aa
SHA1

c255cf28f9d90a549ce7502564fee148ff9f4255
SHA256

3f2e1e8605555887c891dbdd6b19a34327464f43f23a886c38a3ea20150d7c84
SHA512

3c7e4ae2d72ff1423dff023fc2f5a8e4a6ebff0e8a0945fd4335cf090c694b513ccfbc94ca0905dc3b7ed62d21618c64db623f0cd0c64faec744c13f2daaaf29
SSDEEP

393216:l5wMXez8dmAsCjO8RpB4cLO+aPn8jrqwM:zX3m/SO8F/javqrqwM

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

3F2E1E8605555887C891DBDD6B19A34327464F43F23A8.exe
.exe windows x86

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:46:c2:80:eb:f8:18:69:18:d2:d6:82:39:2e:53:a7
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23-02-2022 00:00

Not After

21-02-2023 23:59

Subject

CN=Remote Utilities\, LLC,O=Remote Utilities\, LLC,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:24:8b:2d:0d:9c:67:6b:68:5f:2b:d5:9d:ae:f6:90:c7:33:84:e8:95:b3:a9:ea:56:1f:b2:69:95:c2:3a:6d
Signer

Actual PE Digest

44:24:8b:2d:0d:9c:67:6b:68:5f:2b:d5:9d:ae:f6:90:c7:33:84:e8:95:b3:a9:ea:56:1f:b2:69:95:c2:3a:6d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Remote Utilities\, LLC,O=Remote Utilities\, LLC,L=Moscow,C=RU

01-04-2022 07:47
Valid: true

Chain 1

CN=Remote Utilities\, LLC,O=Remote Utilities\, LLC,L=Moscow,C=RU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 20.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

08:46:c2:80:eb:f8:18:69:18:d2:d6:82:39:2e:53:a7Certificate

Extended Key Usages

Key Usages

44:24:8b:2d:0d:9c:67:6b:68:5f:2b:d5:9d:ae:f6:90:c7:33:84:e8:95:b3:a9:ea:56:1f:b2:69:95:c2:3a:6dSigner

Signature Validations

Verification

01-04-2022 07:47 Valid: true

Chain 1

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 20.0MB

UPX1 Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 15.3MB - Virtual size: 15.3MB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

08:46:c2:80:eb:f8:18:69:18:d2:d6:82:39:2e:53:a7
Certificate

44:24:8b:2d:0d:9c:67:6b:68:5f:2b:d5:9d:ae:f6:90:c7:33:84:e8:95:b3:a9:ea:56:1f:b2:69:95:c2:3a:6d
Signer

01-04-2022 07:47
Valid: true

UPX0
Size: - Virtual size: 20.0MB

UPX1
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 15.3MB - Virtual size: 15.3MB