20a135f0e26fe0af2b9de4ded2c1544e[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

20a135f0e26fe0af2b9de4ded2c1544e.exe
Size

2.0MB
MD5

20a135f0e26fe0af2b9de4ded2c1544e
SHA1

2a125d572a22f376d5d54068e9671d4f9695056d
SHA256

a2fa22d3c5fa0590722fc1e9abc1b94a35fa2b9ea975422f5637ac46e87650b1
SHA512

ff3356f4a7fdb7e9935e6b853e3c648dd19eb36468e5a89664a2624f49155fb3107829ee2036dced5c7c4adad9e372eb9f7d0bd5ace4277d4f3ddb5710ac47d5
SSDEEP

49152:LwQ9MxvQKZ6f/RyvwjFjHy+DvMrk664P33E3:LwCM5QNRY+bMrk9D3

Score

N/A

Malware Config

Signatures

Files

20a135f0e26fe0af2b9de4ded2c1544e.exe
.exe windows x86

2d31d1c1f6facce89e2fd8d4f6d15dfc

Code Sign

38:e9:25:51:69:ae:cd:af:40:cd:14:92:b8:3f:d0:b4
Certificate

Issuer

CN=www.bolero.com

Not Before

13/01/2023, 12:55

Not After

13/01/2024, 13:15

Subject

CN=www.bolero.com

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:dd:52:9b:2c:4e:18:b6:96:93:a4:3f:15:4c:e9:dc:da:aa:ae:45:fe:43:4a:8b:4a:13:10:af:8c:82:63:b3
Signer

Actual PE Digest

51:dd:52:9b:2c:4e:18:b6:96:93:a4:3f:15:4c:e9:dc:da:aa:ae:45:fe:43:4a:8b:4a:13:10:af:8c:82:63:b3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=www.bolero.com

13/01/2023, 13:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA

user32

GetClipboardData

advapi32

GetUserNameA

wininet

InternetOpenA

Sections

.text
Size: 1024B - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2d31d1c1f6facce89e2fd8d4f6d15dfc

Code Sign

38:e9:25:51:69:ae:cd:af:40:cd:14:92:b8:3f:d0:b4Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

51:dd:52:9b:2c:4e:18:b6:96:93:a4:3f:15:4c:e9:dc:da:aa:ae:45:fe:43:4a:8b:4a:13:10:af:8c:82:63:b3Signer

Signature Validations

Verification

13/01/2023, 13:09 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 1024B - Virtual size: 140KB

.bss Size: - Virtual size: 64KB

.rsrc Size: 92KB - Virtual size: 92KB

.rdata Size: 1.9MB - Virtual size: 1.9MB

38:e9:25:51:69:ae:cd:af:40:cd:14:92:b8:3f:d0:b4
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

51:dd:52:9b:2c:4e:18:b6:96:93:a4:3f:15:4c:e9:dc:da:aa:ae:45:fe:43:4a:8b:4a:13:10:af:8c:82:63:b3
Signer

13/01/2023, 13:09
Valid: false

.text
Size: 1024B - Virtual size: 140KB

.bss
Size: - Virtual size: 64KB

.rsrc
Size: 92KB - Virtual size: 92KB

.rdata
Size: 1.9MB - Virtual size: 1.9MB