42cd55c0f021f25893be2d9ccd6225e8ecef534270169ee1e67f4038d269b4bc

Sharing

Copy URL Twitter E-mail

General

Target

42cd55c0f021f25893be2d9ccd6225e8ecef534270169ee1e67f4038d269b4bc
Size

1.5MB
MD5

10683ff971ccc290556d40a26b0dd77f
SHA1

7346c4816284c3ce7764586adb0607d4d8e21024
SHA256

42cd55c0f021f25893be2d9ccd6225e8ecef534270169ee1e67f4038d269b4bc
SHA512

3f9fa2e17cd93926df8c70a13cb08662fea9a79e5a8c2b302fce6dbeb89cae97c3b110743b0ed122c29d1e902d380df93d123bfe6744026b7e6f58959aadfdf5
SSDEEP

24576:8S9mE7v+XQ77IIeU8gWfKpM+xYuu63Pi1FmHu6ekJKqyeVIkrRDsJs:8S9mE7vj7MIeqWCpM+xY51FmHzexNeqi

Score

N/A

Malware Config

Signatures

Files

42cd55c0f021f25893be2d9ccd6225e8ecef534270169ee1e67f4038d269b4bc
.exe windows x64

b3295e259e3c7d46d0d35596d3de7e27

Code Sign

39:25:0a:ed:8f:bf:45:b1:49:8e:d4:6a:be:9b:fb:f8
Certificate

Issuer

CN=Colorful iGame S790-X RNG Edition V35

Not Before

30/11/2022, 17:42

Not After

01/12/2032, 17:42

Subject

CN=Colorful iGame S790-X RNG Edition V35

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:d7:03:79:42:47:24:b2:4c:04:9b:b6:4b:ea:5e:42:90:89:e1:0b:49:06:05:ec:e1:07:77:18:23:0f:c2:15
Signer

Actual PE Digest

3a:d7:03:79:42:47:24:b2:4c:04:9b:b6:4b:ea:5e:42:90:89:e1:0b:49:06:05:ec:e1:07:77:18:23:0f:c2:15

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Colorful iGame S790-X RNG Edition V35

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

PathMakeUniqueName

mscoree

_CorExeMain

advapi32

RegCloseKey

user32

CopyRect

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 877KB - Virtual size: 877KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b3295e259e3c7d46d0d35596d3de7e27

Code Sign

39:25:0a:ed:8f:bf:45:b1:49:8e:d4:6a:be:9b:fb:f8Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3a:d7:03:79:42:47:24:b2:4c:04:9b:b6:4b:ea:5e:42:90:89:e1:0b:49:06:05:ec:e1:07:77:18:23:0f:c2:15Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 876KB

.rsrc Size: 877KB - Virtual size: 877KB

Size: 102KB - Virtual size: 101KB

39:25:0a:ed:8f:bf:45:b1:49:8e:d4:6a:be:9b:fb:f8
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3a:d7:03:79:42:47:24:b2:4c:04:9b:b6:4b:ea:5e:42:90:89:e1:0b:49:06:05:ec:e1:07:77:18:23:0f:c2:15
Signer

01/12/2022, 14:34
Valid: false

.rsrc
Size: 877KB - Virtual size: 877KB