{BD7522CD-594F-484A-AA93-017BF7A37F0C}[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

{BD7522CD-594F-484A-AA93-017BF7A37F0C}.exe
Size

89.5MB
MD5

ed779397a08ac433fa5c1b7714100306
SHA1

495b2b11af7875cfdb6bffbb437c700d6c6b20b3
SHA256

ccf1554eaf18e4636aafb10326a841536fc0a8b4573cb5b56585215f589f2704
SHA512

9087f6a77de69c96b186cc5d63041438b009d58c4b4fe8bb8329421250f321ab7b7fd3b99504284f91b27d70002c9a40df1f0ccf3a96090eb539ec3be018e016
SSDEEP

1572864:wyZwtlpAUmoEVvWFR2c28MywpgHx2p/UaClrVConX+yWtLZ6+YzE39j1CLfGPF1x:wgwzp3FjPN/Hx2KaCDnXFmZYzE3d8Le5

Score

N/A

Malware Config

Signatures

Files

{BD7522CD-594F-484A-AA93-017BF7A37F0C}.exe
.exe windows x86

8b18edac65cf62fc24dc39039063d3c6

Code Sign

06:7c:e8:a9:f2:e0:2a:c7:d4:93:04:f8:5e:94:74:e1
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/06/2020, 00:00

Not After

14/06/2023, 12:00

Subject

CN=AO Kaspersky Lab,O=AO Kaspersky Lab,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1a:cc:0c:ca:0c:2c:b1:40:61:6e:db:ac:81:b9:6e
Certificate

Issuer

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

Not Before

25/08/2021, 14:06

Not After

25/08/2036, 14:06

Subject

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

22:ae:0d:7a:59:7e:4a:78:d4:4b:62:65:16:8a:d2:4b:56:3c:6d:70:7a:d3:28:57:0b:ca:ce:55:66:11:4d:e2
Signer

Actual PE Digest

22:ae:0d:7a:59:7e:4a:78:d4:4b:62:65:16:8a:d2:4b:56:3c:6d:70:7a:d3:28:57:0b:ca:ce:55:66:11:4d:e2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

30/08/2022, 12:09
Valid: false

8a:db:9e:78:6c:93:59:97:7f:91:56:ec:62:70:28:e0:ff:e1:5f:8e
Signer

Actual PE Digest

8a:db:9e:78:6c:93:59:97:7f:91:56:ec:62:70:28:e0:ff:e1:5f:8e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=AO Kaspersky Lab,O=AO Kaspersky Lab,L=Moscow,C=RU

30/08/2022, 12:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
OutputDebugStringA
OutputDebugStringW
VirtualProtect

Exports

Exports

mainEECStartup

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eecseg
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89.2MB - Virtual size: 89.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b18edac65cf62fc24dc39039063d3c6

Code Sign

06:7c:e8:a9:f2:e0:2a:c7:d4:93:04:f8:5e:94:74:e1Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

1a:cc:0c:ca:0c:2c:b1:40:61:6e:db:ac:81:b9:6eCertificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

22:ae:0d:7a:59:7e:4a:78:d4:4b:62:65:16:8a:d2:4b:56:3c:6d:70:7a:d3:28:57:0b:ca:ce:55:66:11:4d:e2Signer

Signature Validations

Verification

30/08/2022, 12:09 Valid: false

8a:db:9e:78:6c:93:59:97:7f:91:56:ec:62:70:28:e0:ff:e1:5f:8eSigner

Signature Validations

Verification

30/08/2022, 12:09 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 227KB - Virtual size: 226KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 8KB - Virtual size: 19KB

.didat Size: 512B - Virtual size: 64B

.eecseg Size: 512B - Virtual size: 344B

.rsrc Size: 89.2MB - Virtual size: 89.2MB

.reloc Size: 12KB - Virtual size: 12KB

06:7c:e8:a9:f2:e0:2a:c7:d4:93:04:f8:5e:94:74:e1
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

1a:cc:0c:ca:0c:2c:b1:40:61:6e:db:ac:81:b9:6e
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

22:ae:0d:7a:59:7e:4a:78:d4:4b:62:65:16:8a:d2:4b:56:3c:6d:70:7a:d3:28:57:0b:ca:ce:55:66:11:4d:e2
Signer

30/08/2022, 12:09
Valid: false

8a:db:9e:78:6c:93:59:97:7f:91:56:ec:62:70:28:e0:ff:e1:5f:8e
Signer

30/08/2022, 12:09
Valid: false

.text
Size: 227KB - Virtual size: 226KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 8KB - Virtual size: 19KB

.didat
Size: 512B - Virtual size: 64B

.eecseg
Size: 512B - Virtual size: 344B

.rsrc
Size: 89.2MB - Virtual size: 89.2MB

.reloc
Size: 12KB - Virtual size: 12KB