0553b9c8c8e734222ec8c7ce0e8fdc4c09da333747f65f670164e73acafb2582

Sharing

Copy URL Twitter E-mail

General

Target

0553b9c8c8e734222ec8c7ce0e8fdc4c09da333747f65f670164e73acafb2582
Size

3.3MB
MD5

a880858372b396487f19b3dd5126e272
SHA1

50ae9067002e241c92eee167aa2f82695b42f1ed
SHA256

0553b9c8c8e734222ec8c7ce0e8fdc4c09da333747f65f670164e73acafb2582
SHA512

5fe97b1ef3de074da50f6d254e5611409ec2bb5870e8b12ae1bd44c906a831c8d857b7635da381560d22221273a1e688be003ade5da354cc2fc72afe9e664cdf
SSDEEP

98304:WThPCL7+wO+zXr5cG7eWnyKQdu0bDhr3o7dph0z:WtPAnOG1nrQNbt4H2z

Score

N/A

Malware Config

Signatures

Files

0553b9c8c8e734222ec8c7ce0e8fdc4c09da333747f65f670164e73acafb2582
.exe windows x64

3ad31a9ae17f8904aa45c6a2b8135e0f

Code Sign

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41
Certificate

Issuer

CN=Colorful iGame Z390-X RNG Edition V20

Not Before

26/11/2022, 12:57

Not After

27/11/2032, 12:57

Subject

CN=Colorful iGame Z390-X RNG Edition V20

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:e4:a8:50:e9:94:57:4f:47:67:4c:d6:c9:bc:c6:01:76:d5:32:52:e2:e6:65:25:d8:79:1e:8c:24:90:c2:87
Signer

Actual PE Digest

bf:e4:a8:50:e9:94:57:4f:47:67:4c:d6:c9:bc:c6:01:76:d5:32:52:e2:e6:65:25:d8:79:1e:8c:24:90:c2:87

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Colorful iGame Z390-X RNG Edition V20

24/11/2022, 14:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

DragFinish

mscoree

_CorExeMain

advapi32

RegOpenKeyExW

user32

ValidateRect

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3ad31a9ae17f8904aa45c6a2b8135e0f

Code Sign

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

bf:e4:a8:50:e9:94:57:4f:47:67:4c:d6:c9:bc:c6:01:76:d5:32:52:e2:e6:65:25:d8:79:1e:8c:24:90:c2:87Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 878KB

.rsrc Size: 2.8MB - Virtual size: 4.1MB

Size: 102KB - Virtual size: 101KB

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bf:e4:a8:50:e9:94:57:4f:47:67:4c:d6:c9:bc:c6:01:76:d5:32:52:e2:e6:65:25:d8:79:1e:8c:24:90:c2:87
Signer

24/11/2022, 14:55
Valid: false

.rsrc
Size: 2.8MB - Virtual size: 4.1MB