acf718307ee9a712f7ff2d0dd368db2da22aad0cc0c4cf88e1f7a18d8f29ac12

Sharing

Copy URL Twitter E-mail

General

Target

acf718307ee9a712f7ff2d0dd368db2da22aad0cc0c4cf88e1f7a18d8f29ac12
Size

1.1MB
MD5

cfd7d07083bda42c3ad7635de21d5852
SHA1

66dd9cb90d94f07e9a33a74b55c6f332968679dd
SHA256

acf718307ee9a712f7ff2d0dd368db2da22aad0cc0c4cf88e1f7a18d8f29ac12
SHA512

dd97f262aa9171645e295d91286ba11cd04cdc12a728ae84cacd159137c9b340f9330115ece1469e518b937981fa089b6fe1c51eec25c6b8767c6023e7d3ede6
SSDEEP

12288:6tW57iXjLhN1A5YJZqjI7h+3iw8cVZEH1FEHv7ETADyzCoRxiG+iPNDJIaRu3WOj:6NA54gjIFsiwRVhzyzjiniPNyaaJvr

Score

N/A

Malware Config

Signatures

Files

acf718307ee9a712f7ff2d0dd368db2da22aad0cc0c4cf88e1f7a18d8f29ac12
.exe windows x64

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:b5:c7:f8:c1:8a:7a:2b:fb:b5:27:46
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

04/06/2019, 05:45

Not After

04/06/2022, 05:45

Subject

SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:71:ab:de:3d:3a:f8:6f:5d:6f:85:8d:3a:6d:04:df:e7:df:5e:cd:43:43:92:ed:90:9e:33:aa:c2:1d:fa:1a
Signer

Actual PE Digest

ce:71:ab:de:3d:3a:f8:6f:5d:6f:85:8d:3a:6d:04:df:e7:df:5e:cd:43:43:92:ed:90:9e:33:aa:c2:1d:fa:1a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

24/11/2022, 14:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

32:b5:c7:f8:c1:8a:7a:2b:fb:b5:27:46Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ce:71:ab:de:3d:3a:f8:6f:5d:6f:85:8d:3a:6d:04:df:e7:df:5e:cd:43:43:92:ed:90:9e:33:aa:c2:1d:fa:1aSigner

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 2KB - Virtual size: 1KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

32:b5:c7:f8:c1:8a:7a:2b:fb:b5:27:46
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ce:71:ab:de:3d:3a:f8:6f:5d:6f:85:8d:3a:6d:04:df:e7:df:5e:cd:43:43:92:ed:90:9e:33:aa:c2:1d:fa:1a
Signer

24/11/2022, 14:55
Valid: false

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 2KB - Virtual size: 1KB