factusolinstalarweb-2021[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

factusolinstalarweb-2021.exe
Size

822KB
MD5

2a43935ea1d4e7d2b1131d5b334e6717
SHA1

574b050e326652dd6c93ff3337efe3480a66056b
SHA256

3ba0ae869fb5a76057152b68f3310e12fa898784b5449ce118ac0acc0c14e4a2
SHA512

4cbc95a568d764328255777b9e9962162a995538286331179b6e6b3f0d685e47d4268713a2d1fb580f6222731eedf939b1ebe551b09e6eb05be11908e91c7b18
SSDEEP

24576:GlDDDDDH8TdsABO8LDUKELeXZ2MZZZZZZZZZZZZZZHVZdo8OOOOu:iDDDDDH8TdsABO8LDUKELeX9vo8OOOOu

Score

N/A

Malware Config

Signatures

Files

factusolinstalarweb-2021.exe
.exe windows x86

Password: Gilipollas

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7f:3d:f7:c3:60:8b:40:f8:3e:be:84:d7:8a:5a:3e:97
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

08/02/2019, 00:00

Not After

09/03/2021, 23:59

Subject

CN=Software del Sol S.A.,O=Software del Sol S.A.,L=Mengibar,ST=Jaen,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

80:c2:2e:fe:9a:9d:ef:cf:0c:54:82:de:1d:6c:63:6b:e0:2f:16:2a:f5:66:8a:53:cb:71:5f:78:1b:65:be:78
Signer

Actual PE Digest

80:c2:2e:fe:9a:9d:ef:cf:0c:54:82:de:1d:6c:63:6b:e0:2f:16:2a:f5:66:8a:53:cb:71:5f:78:1b:65:be:78

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Software del Sol S.A.,O=Software del Sol S.A.,L=Mengibar,ST=Jaen,C=ES

15/12/2022, 13:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: Gilipollas

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7f:3d:f7:c3:60:8b:40:f8:3e:be:84:d7:8a:5a:3e:97Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

80:c2:2e:fe:9a:9d:ef:cf:0c:54:82:de:1d:6c:63:6b:e0:2f:16:2a:f5:66:8a:53:cb:71:5f:78:1b:65:be:78Signer

Signature Validations

Verification

15/12/2022, 13:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 817KB - Virtual size: 816KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

7f:3d:f7:c3:60:8b:40:f8:3e:be:84:d7:8a:5a:3e:97
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

80:c2:2e:fe:9a:9d:ef:cf:0c:54:82:de:1d:6c:63:6b:e0:2f:16:2a:f5:66:8a:53:cb:71:5f:78:1b:65:be:78
Signer

15/12/2022, 13:51
Valid: false

.text
Size: 817KB - Virtual size: 816KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B