ihcaiag[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ihcaiag.exe
Size

457.0MB
MD5

82121649ff44e92e9b029fcdf0e25cce
SHA1

4b69c4e931e15655d050e8683663982fd1195f9d
SHA256

6afd1ceacb145d84e706c553247459bbd492733e50f21de8a42424ba7de87c62
SHA512

7c0c78ceda34e6be862fbd3bf912b3f3464c63d7e55a33dcf73d4dc9ff7b788598c3d076b4ce3370d42e56c567c73bd7c0854bdefacd73cdfa3973742015628a
SSDEEP

24576:h7/KGExULMntaZj2MQLnZPxiSJMuf/mi/pi/+5e+/LI:h7uw0AfBaxCA8

Score

N/A

Malware Config

Signatures

Files

ihcaiag.exe
.exe windows x64

Code Sign

32:c6:2e:ae:b1:94:40:82:45:75:88:3d:14:2a:00:34
Certificate

Issuer

CN=Samsung C32R509FHI LC31R502FHIXCI

Not Before

02/01/2023, 11:26

Not After

03/01/2033, 11:26

Subject

CN=Samsung C32R509FHI LC31R502FHIXCI

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:f1:6c:8a:e5:97:fb:9c:9f:2a:72:91:93:90:3d:ea:51:41:04:50:09:61:40:9f:7e:38:2f:96:8e:37:cf:8f
Signer

Actual PE Digest

44:f1:6c:8a:e5:97:fb:9c:9f:2a:72:91:93:90:3d:ea:51:41:04:50:09:61:40:9f:7e:38:2f:96:8e:37:cf:8f

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Samsung C32R509FHI LC31R502FHIXCI

15/12/2022, 13:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

32:c6:2e:ae:b1:94:40:82:45:75:88:3d:14:2a:00:34Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

44:f1:6c:8a:e5:97:fb:9c:9f:2a:72:91:93:90:3d:ea:51:41:04:50:09:61:40:9f:7e:38:2f:96:8e:37:cf:8fSigner

Signature Validations

Verification

15/12/2022, 13:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rsrc Size: 82KB - Virtual size: 81KB

32:c6:2e:ae:b1:94:40:82:45:75:88:3d:14:2a:00:34
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

44:f1:6c:8a:e5:97:fb:9c:9f:2a:72:91:93:90:3d:ea:51:41:04:50:09:61:40:9f:7e:38:2f:96:8e:37:cf:8f
Signer

15/12/2022, 13:55
Valid: false

.text
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 82KB - Virtual size: 81KB