fc52bdc35a10badcd4f88cd91d0c071bc05520c78097501f5f23fd5114e15e64

Sharing

Copy URL Twitter E-mail

General

Target

fc52bdc35a10badcd4f88cd91d0c071bc05520c78097501f5f23fd5114e15e64
Size

3.0MB
MD5

0c622feef305af2c28e228cefb8181a4
SHA1

f5f2ba2127ce87b08f94724b516b345e62f108ef
SHA256

fc52bdc35a10badcd4f88cd91d0c071bc05520c78097501f5f23fd5114e15e64
SHA512

f0850b25006c8202ff7990191a3f5282aad7423a965aef73de260c987c2809943f383ac9b5aff5d4cf1352f39a501dff2498e6dc1f7cf3c39f3f704e2e8a0589
SSDEEP

49152:yujyHxYxAb25frlLGbe6fDZqWTGdd/04KtB1BiV6BEQqKITxr:yuExYxW25frlLGbeWDwWEd/0Ff1B3a4g

Score

N/A

Malware Config

Signatures

Files

fc52bdc35a10badcd4f88cd91d0c071bc05520c78097501f5f23fd5114e15e64
.exe windows x64

a68935b124f91689a1382da100c80f12

Code Sign

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41
Certificate

Issuer

CN=Colorful iGame Z390-X RNG Edition V20

Not Before

26/11/2022, 12:57

Not After

27/11/2032, 12:57

Subject

CN=Colorful iGame Z390-X RNG Edition V20

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:da:72:13:dc:9b:ef:ab:da:44:69:7a:df:da:35:e9:39:4e:ee:83:c4:06:39:9d:e2:c6:7a:97:64:96:3a:aa
Signer

Actual PE Digest

94:da:72:13:dc:9b:ef:ab:da:44:69:7a:df:da:35:e9:39:4e:ee:83:c4:06:39:9d:e2:c6:7a:97:64:96:3a:aa

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Colorful iGame Z390-X RNG Edition V20

24/11/2022, 14:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHGetIconOverlayIndexA

mscoree

_CorExeMain

advapi32

RegOpenKeyExA

user32

CopyRect

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.4MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a68935b124f91689a1382da100c80f12

Code Sign

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

94:da:72:13:dc:9b:ef:ab:da:44:69:7a:df:da:35:e9:39:4e:ee:83:c4:06:39:9d:e2:c6:7a:97:64:96:3a:aaSigner

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 878KB

.rsrc Size: 2.4MB - Virtual size: 3.5MB

Size: 102KB - Virtual size: 101KB

17:a8:66:3a:36:58:63:a1:47:5e:dc:4c:ba:9a:1b:41
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

94:da:72:13:dc:9b:ef:ab:da:44:69:7a:df:da:35:e9:39:4e:ee:83:c4:06:39:9d:e2:c6:7a:97:64:96:3a:aa
Signer

24/11/2022, 14:54
Valid: false

.rsrc
Size: 2.4MB - Virtual size: 3.5MB