1d49df774dab3f2e6e40eb57da6b8d6272050890231a97e4291f018969681681

Sharing

Copy URL Twitter E-mail

General

Target

1d49df774dab3f2e6e40eb57da6b8d6272050890231a97e4291f018969681681
Size

75KB
MD5

a322074116707b7ba6bafc19eff23d97
SHA1

ece8c7c7e495c5b454f51c963f9178447a7d1d1c
SHA256

1d49df774dab3f2e6e40eb57da6b8d6272050890231a97e4291f018969681681
SHA512

d326e9a754e5996901797e52244172bc929ea0f362bbb655e8d62af1eca78b856ed963b39ade026d3a0080ef4e120f887f712903b27e4ce17f2db8fcf1507905
SSDEEP

1536:w1YbkFSf0Iq5l+g7B4ajl4Y9F96Icw5KJY/ffnWOOdg7q3n+fQP:a6kFSf0I6l+qWajGCrgw5cY3fkdnsQ

Score

N/A

Malware Config

Signatures

Files

1d49df774dab3f2e6e40eb57da6b8d6272050890231a97e4291f018969681681
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d2:0c:d8:af:8c:a0:76:7e:91:1e:e2:2f:03:28:1f:76
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

10/11/2014, 15:19

Not After

11/11/2015, 15:19

Subject

CN=LUYARA FELIX DE ARAUJO 05168873359,OU=TI,O=LUYARA FELIX DE ARAUJO 05168873359,L=Imperatriz,ST=Maranhao,C=BR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

94:90:06:ac:18:b5:c0:a5:32:56:7c:cd:17:fe:53:15:e9:4a:bd:b8:d1:82:78:1a:9f:e0:18:4a:e4:75:63:0f
Signer

Actual PE Digest

94:90:06:ac:18:b5:c0:a5:32:56:7c:cd:17:fe:53:15:e9:4a:bd:b8:d1:82:78:1a:9f:e0:18:4a:e4:75:63:0f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=LUYARA FELIX DE ARAUJO 05168873359,OU=TI,O=LUYARA FELIX DE ARAUJO 05168873359,L=Imperatriz,ST=Maranhao,C=BR

24/11/2022, 14:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8Certificate

Extended Key Usages

Key Usages

11:21:d2:0c:d8:af:8c:a0:76:7e:91:1e:e2:2f:03:28:1f:76Certificate

Extended Key Usages

Key Usages

94:90:06:ac:18:b5:c0:a5:32:56:7c:cd:17:fe:53:15:e9:4a:bd:b8:d1:82:78:1a:9f:e0:18:4a:e4:75:63:0fSigner

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 62KB - Virtual size: 61KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

11:21:d2:0c:d8:af:8c:a0:76:7e:91:1e:e2:2f:03:28:1f:76
Certificate

94:90:06:ac:18:b5:c0:a5:32:56:7c:cd:17:fe:53:15:e9:4a:bd:b8:d1:82:78:1a:9f:e0:18:4a:e4:75:63:0f
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 62KB - Virtual size: 61KB

.reloc
Size: 512B - Virtual size: 12B