5bffba8eade69837e420f6e8499b1147892e05147f1f8ee7741f12247ff99aef

Sharing

Copy URL Twitter E-mail

General

Target

5bffba8eade69837e420f6e8499b1147892e05147f1f8ee7741f12247ff99aef
Size

1.3MB
MD5

1714f7bf6c3ec04d57b7d6d9600c9ccb
SHA1

b94df3a9d9ae2b45d7b57d456121444392a4b9e5
SHA256

ecf31b189fc8ccce6a6aa22438246d52a4cec876ebb843c04fa8602e0be6c514
SHA512

148db15e3cb8cc75054d8ed2dc87e07760f74a8a1a9c6452d685bfeeae7d0b5d4f9be3e8050824deafa85953ce2e963c66afccfc7a255814251ba58f8937168b
SSDEEP

12288:7FAF0SkXDxh6wPVDkj4D+zDPjmEwy+78LvlaUezJaRWfl5z/DsBP0HYOxKJAv+V5:SvX9gT1H/4zAUAm7OWrD3z

Score

N/A

Malware Config

Signatures

Files

5bffba8eade69837e420f6e8499b1147892e05147f1f8ee7741f12247ff99aef
.exe windows x64

Code Sign

6e:a2:32:61:70:fc:5c:8e:4a:3f:79:b9:7e:99:bb:09
Certificate

Issuer

CN=Logitech ZC-9017 USA State of Washington

Not Before

23/12/2022, 18:18

Not After

24/12/2032, 18:18

Subject

CN=Logitech ZC-9017 USA State of Washington

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:26:0f:69:da:fa:bc:2d:24:fa:58:17:6d:af:49:25:96:be:86:2d:33:a9:cb:db:f7:c8:77:61:eb:6d:45:62
Signer

Actual PE Digest

53:26:0f:69:da:fa:bc:2d:24:fa:58:17:6d:af:49:25:96:be:86:2d:33:a9:cb:db:f7:c8:77:61:eb:6d:45:62

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Logitech ZC-9017 USA State of Washington

15/12/2022, 13:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

6e:a2:32:61:70:fc:5c:8e:4a:3f:79:b9:7e:99:bb:09Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

53:26:0f:69:da:fa:bc:2d:24:fa:58:17:6d:af:49:25:96:be:86:2d:33:a9:cb:db:f7:c8:77:61:eb:6d:45:62Signer

Signature Validations

Verification

15/12/2022, 13:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 98KB - Virtual size: 97KB

6e:a2:32:61:70:fc:5c:8e:4a:3f:79:b9:7e:99:bb:09
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

53:26:0f:69:da:fa:bc:2d:24:fa:58:17:6d:af:49:25:96:be:86:2d:33:a9:cb:db:f7:c8:77:61:eb:6d:45:62
Signer

15/12/2022, 13:55
Valid: false

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 98KB - Virtual size: 97KB