5b1dc5e13ffe416efe8c4c697a27d3f22d2dbbee2da22b092d71778f5afd9ab8

Sharing

Copy URL Twitter E-mail

General

Target

5b1dc5e13ffe416efe8c4c697a27d3f22d2dbbee2da22b092d71778f5afd9ab8
Size

3.0MB
MD5

6ed7f70fbbf0f655545813aef996526d
SHA1

feb84cccc19a79fc578b7fd0a1728ecfe781fa8a
SHA256

5b1dc5e13ffe416efe8c4c697a27d3f22d2dbbee2da22b092d71778f5afd9ab8
SHA512

d486d8d1f7f82836f66aa2d055220803e98262e29d0d134f27267ea2de408086bcf26d82202655c5b93b7b9a19caba645b9dd0d76ed37e13f5a9cc1afd1c0f68
SSDEEP

49152:/Sc7UwEbyHG8yU9WqE24i9yA/N53G4acGJbYPqCdECZomqqA:/fYwAyHG83WqUMjyPBCdjumQ

Score

N/A

Malware Config

Signatures

Files

5b1dc5e13ffe416efe8c4c697a27d3f22d2dbbee2da22b092d71778f5afd9ab8
.exe windows x64

6353daf1776c4d63ed47fbbeb98f7d38

Code Sign

7a:2e:cd:ce:82:6e:8d:92:4e:36:63:de:cb:44:f8:f4
Certificate

Issuer

CN=Logitech Z-906 Template US

Not Before

16/11/2022, 12:50

Not After

17/11/2032, 12:50

Subject

CN=Logitech Z-906 Template US

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:bf:bf:af:6d:d0:c1:5c:43:12:9a:3e:a1:ec:e9:78:85:5e:22:29:80:8e:26:38:72:36:66:1e:3b:b3:29:28
Signer

Actual PE Digest

cc:bf:bf:af:6d:d0:c1:5c:43:12:9a:3e:a1:ec:e9:78:85:5e:22:29:80:8e:26:38:72:36:66:1e:3b:b3:29:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Logitech Z-906 Template US

17/11/2022, 13:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

shell32

ShellAboutW

advapi32

GetUserNameW

user32

OffsetRect

Sections

Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 619KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 814KB - Virtual size: 836KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6353daf1776c4d63ed47fbbeb98f7d38

Code Sign

7a:2e:cd:ce:82:6e:8d:92:4e:36:63:de:cb:44:f8:f4Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

cc:bf:bf:af:6d:d0:c1:5c:43:12:9a:3e:a1:ec:e9:78:85:5e:22:29:80:8e:26:38:72:36:66:1e:3b:b3:29:28Signer

Signature Validations

Verification

17/11/2022, 13:15 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

user32

Sections

Size: - Virtual size: 2.3MB

Size: - Virtual size: 2.2MB

Size: - Virtual size: 619KB

Size: - Virtual size: 1KB

.reloc Size: 38KB - Virtual size: 37KB

Size: - Virtual size: 4B

.rsrc Size: 814KB - Virtual size: 836KB

Size: 105KB - Virtual size: 104KB

7a:2e:cd:ce:82:6e:8d:92:4e:36:63:de:cb:44:f8:f4
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

cc:bf:bf:af:6d:d0:c1:5c:43:12:9a:3e:a1:ec:e9:78:85:5e:22:29:80:8e:26:38:72:36:66:1e:3b:b3:29:28
Signer

17/11/2022, 13:15
Valid: false

.reloc
Size: 38KB - Virtual size: 37KB

.rsrc
Size: 814KB - Virtual size: 836KB