5397c0a9bed881d599e89ce303475f852ad677e248036f1b8d273051f1a50da0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5397c0a9bed881d599e89ce303475f852ad677e248036f1b8d273051f1a50da0.exe
Size

596KB
MD5

14545a35632ed4da111face279f17c67
SHA1

3d557bf8f649b4a0ec328c82b4178846b5854dec
SHA256

5397c0a9bed881d599e89ce303475f852ad677e248036f1b8d273051f1a50da0
SHA512

0d8b5d935f289d33f64883a6f9523d29f2e83a4da9f00d46224ea745db7be13300d770a62052b7e924492c55297a14920c639e854973d732cc644e511af38277
SSDEEP

6144:KQJt0hn3E6U3DHpwKyLmKyLmKyLKjP0ux89vqqrDanemkfUPFQ/dA:tu1spwkkwjh8tGXkcM2

Score

N/A

Malware Config

Signatures

Files

5397c0a9bed881d599e89ce303475f852ad677e248036f1b8d273051f1a50da0.exe
.exe windows x64

d6431450016c97ee92a9e6126986516e

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:2e:33:7f:ff:23:e5:b2:a1:32:1f:fd:e5:6d:17:59
Certificate

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

12-08-2022 14:21

Not After

12-08-2023 14:21

Subject

SERIALNUMBER=389419950,CN=Karolina Klimowska,O=Karolina Klimowska,POSTALCODE=80-126,STREET=Cedrowa 31/115,L=Gdańsk,ST=pomorskie,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28-07-2022 08:56

Not After

27-07-2033 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a4:bc:9d:a7:57:d6:45:83:16:cf:fd:f4:3c:4f:ab:f6:b2:40:66:44:63:94:d8:db:bc:01:53:ba:76:dc:63:29
Signer

Actual PE Digest

a4:bc:9d:a7:57:d6:45:83:16:cf:fd:f4:3c:4f:ab:f6:b2:40:66:44:63:94:d8:db:bc:01:53:ba:76:dc:63:29

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=389419950,CN=Karolina Klimowska,O=Karolina Klimowska,POSTALCODE=80-126,STREET=Cedrowa 31/115,L=Gdańsk,ST=pomorskie,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c

17-11-2022 13:18
Valid: true

Chain 1

SERIALNUMBER=389419950,CN=Karolina Klimowska,O=Karolina Klimowska,POSTALCODE=80-126,STREET=Cedrowa 31/115,L=Gdańsk,ST=pomorskie,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Chain 2

SERIALNUMBER=389419950,CN=Karolina Klimowska,O=Karolina Klimowska,POSTALCODE=80-126,STREET=Cedrowa 31/115,L=Gdańsk,ST=pomorskie,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

msvcrt

__C_specific_handler
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_fmode
_ftime
_initterm
_lock
_onexit
_setjmp
_unlock
_write
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
realloc
signal
sprintf
strcmp
strerror
strlen
strncmp
vfprintf

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tig
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d6431450016c97ee92a9e6126986516e

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89Certificate

Extended Key Usages

Key Usages

4a:2e:33:7f:ff:23:e5:b2:a1:32:1f:fd:e5:6d:17:59Certificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

a4:bc:9d:a7:57:d6:45:83:16:cf:fd:f4:3c:4f:ab:f6:b2:40:66:44:63:94:d8:db:bc:01:53:ba:76:dc:63:29Signer

Signature Validations

Verification

17-11-2022 13:18 Valid: true

Chain 1

Chain 2

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 105KB - Virtual size: 104KB

.data Size: 76KB - Virtual size: 76KB

.rdata Size: 34KB - Virtual size: 34KB

.pdata Size: 9KB - Virtual size: 8KB

.xdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 112B

.tls Size: 512B - Virtual size: 80B

.rsrc Size: 199KB - Virtual size: 198KB

.Tig Size: 148KB - Virtual size: 148KB

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

4a:2e:33:7f:ff:23:e5:b2:a1:32:1f:fd:e5:6d:17:59
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

a4:bc:9d:a7:57:d6:45:83:16:cf:fd:f4:3c:4f:ab:f6:b2:40:66:44:63:94:d8:db:bc:01:53:ba:76:dc:63:29
Signer

17-11-2022 13:18
Valid: true

.text
Size: 105KB - Virtual size: 104KB

.data
Size: 76KB - Virtual size: 76KB

.rdata
Size: 34KB - Virtual size: 34KB

.pdata
Size: 9KB - Virtual size: 8KB

.xdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 80B

.rsrc
Size: 199KB - Virtual size: 198KB

.Tig
Size: 148KB - Virtual size: 148KB