6fc2fafef44051da8cf4d3619e1d633b555b07ed001389e45bde9829d0ca9274

Sharing

Copy URL Twitter E-mail

General

Target

6fc2fafef44051da8cf4d3619e1d633b555b07ed001389e45bde9829d0ca9274
Size

16KB
MD5

e81196e9a16530dd4615617823ea4c54
SHA1

0ebac92063fedf6f4c6910653e934fb6a40084d3
SHA256

6fc2fafef44051da8cf4d3619e1d633b555b07ed001389e45bde9829d0ca9274
SHA512

7e5fd08fc7aeda64810c5c067628cb006461f9fe812bcb8ea4e04f6f042f0cc1e4a14ed7cdf6d6c7586d5e1d0314695124c1816b4f3167b60b0dfbd2261ca981
SSDEEP

192:dy9NLotlVlbDh0mvampJkR1E01OAXpC2g2SlYqufZn7iKa9sgfxIZHOW:JlbDOmvaZJ1OAQGfZuKDgf2hv

Score

N/A

Malware Config

Signatures

Files

6fc2fafef44051da8cf4d3619e1d633b555b07ed001389e45bde9829d0ca9274
.exe windows x64

Code Sign

e8:07:89:3d:1f:3e:41:2f:6d:cc:6a:ba:ef:96:6e:43
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/07/2019, 00:00

Not After

14/07/2022, 23:59

Subject

CN=IncrediBuild Software Ltd.,O=IncrediBuild Software Ltd.,POSTALCODE=5300047,STREET=4 Ariel Sharon st,L=Givatayim,ST=Tel Aviv,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:dd:e8:48:d7:e8:6a:94:db:e9:ce:e7:52:16:1a:30:7a:01:01:c8:2d:46:06:27:31:6a:b7:6c:b0:68:5d:b1
Signer

Actual PE Digest

16:dd:e8:48:d7:e8:6a:94:db:e9:ce:e7:52:16:1a:30:7a:01:01:c8:2d:46:06:27:31:6a:b7:6c:b0:68:5d:b1

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=IncrediBuild Software Ltd.,O=IncrediBuild Software Ltd.,POSTALCODE=5300047,STREET=4 Ariel Sharon st,L=Givatayim,ST=Tel Aviv,C=IL

03/08/2020, 04:07
Valid: true

Chain 1

CN=IncrediBuild Software Ltd.,O=IncrediBuild Software Ltd.,POSTALCODE=5300047,STREET=4 Ariel Sharon st,L=Givatayim,ST=Tel Aviv,C=IL

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

e8:07:89:3d:1f:3e:41:2f:6d:cc:6a:ba:ef:96:6e:43Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

16:dd:e8:48:d7:e8:6a:94:db:e9:ce:e7:52:16:1a:30:7a:01:01:c8:2d:46:06:27:31:6a:b7:6c:b0:68:5d:b1Signer

Signature Validations

Verification

03/08/2020, 04:07 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 3KB - Virtual size: 2KB

e8:07:89:3d:1f:3e:41:2f:6d:cc:6a:ba:ef:96:6e:43
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

16:dd:e8:48:d7:e8:6a:94:db:e9:ce:e7:52:16:1a:30:7a:01:01:c8:2d:46:06:27:31:6a:b7:6c:b0:68:5d:b1
Signer

03/08/2020, 04:07
Valid: true

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 3KB - Virtual size: 2KB