file[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

file.exe
Size

1.3MB
MD5

8851bd99bb8728fa34a8a7afce73b36e
SHA1

d9a7790e4f41673f6a484180c717c778b258308e
SHA256

66d3e2e7a164f88efb1aecc3c81dbf1d29590a0e852f7dcebda595467027ab3d
SHA512

ff8b2a5ce027aef8f046c22fb77d4448d3f6fc4c0a117e9cb1b08b16d9e993a3c74846428974cc56f754b73d41b9a15863b9e5bc7c776b7a859d073d7e145f6f
SSDEEP

24576:n8E0T8wpeIq79Bu+pj+SRLQdqJptmfXCFIif/:nZ0TbpeIq7HumRLQkJpoKFIif

Score

N/A

Malware Config

Signatures

Files

file.exe
.exe windows x64

93781575d14e0b07e08fd8f05363ff97

Code Sign

30:53:fb:c3:22:9a:9e:ad:47:c1:25:8a:04:a0:09:c8
Certificate

Issuer

CN=Toshiba MQ01ABMxx 2.5 MQ01ABD060

Not Before

07-10-2022 20:43

Not After

08-10-2032 20:43

Subject

CN=Toshiba MQ01ABMxx 2.5 MQ01ABD060

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:26:71:73:9f:f7:1e:57:5c:30:30:e8:6e:ec:8a:ae:f2:e3:f0:cd:15:73:a0:00:12:7c:bc:6e:ef:07:a6:00
Signer

Actual PE Digest

dc:26:71:73:9f:f7:1e:57:5c:30:30:e8:6e:ec:8a:ae:f2:e3:f0:cd:15:73:a0:00:12:7c:bc:6e:ef:07:a6:00

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Toshiba MQ01ABMxx 2.5 MQ01ABD060

17-11-2022 13:22
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHGetDiskFreeSpaceA

mscoree

_CorExeMain

advapi32

RegisterEventSourceW

user32

CreateMenu

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 877KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 793KB - Virtual size: 793KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93781575d14e0b07e08fd8f05363ff97

Code Sign

30:53:fb:c3:22:9a:9e:ad:47:c1:25:8a:04:a0:09:c8Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

dc:26:71:73:9f:f7:1e:57:5c:30:30:e8:6e:ec:8a:ae:f2:e3:f0:cd:15:73:a0:00:12:7c:bc:6e:ef:07:a6:00Signer

Signature Validations

Verification

17-11-2022 13:22 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 877KB

.rsrc Size: 793KB - Virtual size: 793KB

Size: 93KB - Virtual size: 92KB

30:53:fb:c3:22:9a:9e:ad:47:c1:25:8a:04:a0:09:c8
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

dc:26:71:73:9f:f7:1e:57:5c:30:30:e8:6e:ec:8a:ae:f2:e3:f0:cd:15:73:a0:00:12:7c:bc:6e:ef:07:a6:00
Signer

17-11-2022 13:22
Valid: false

.rsrc
Size: 793KB - Virtual size: 793KB