9fc6e225b30304df945730f119a08079dc9852eb7d092f0800fb3767c9a282b4

Sharing

Copy URL Twitter E-mail

General

Target

9fc6e225b30304df945730f119a08079dc9852eb7d092f0800fb3767c9a282b4
Size

1.2MB
MD5

5e96af7e5726b064345b25dcbe96c13d
SHA1

a68a2a67a89901965209f42d9d13981ccfd5c5cb
SHA256

9fc6e225b30304df945730f119a08079dc9852eb7d092f0800fb3767c9a282b4
SHA512

0a9a12fbc963b8cb1ccf689face3ceba9f457f098f6e490087107bd1a2a0dbdfa3604497323a4f24e206bf5ecbf5e65f135e87707ef145ad6ccdfd92d8895985
SSDEEP

24576:reMbgSSDE4LyLvDw3Rs11ux2PfVWtexpdJFUrNh2KXWi3VI7FKXResPAQeM:rTbgTazEipxpbk2KXWiFsFKXRXPB

Score

N/A

Malware Config

Signatures

Files

9fc6e225b30304df945730f119a08079dc9852eb7d092f0800fb3767c9a282b4
.exe windows x86

a2833106949ae6e20c40ed0128f9df4b

Code Sign

38:2b:06:42:f2:7d:3c:b7:45:b8:54:93:9d:a5:e7:7e
Certificate

Issuer

CN=www.witch.com

Not Before

15/01/2023, 17:12

Not After

15/01/2024, 17:32

Subject

CN=www.witch.com

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d9:30:e9:16:1b:b1:91:fe:0e:c7:24:b8:fe:df:66:56:d6:8f:be:d0:7c:fd:f5:99:05:b8:fa:9a:e8:6e:89:1a
Signer

Actual PE Digest

d9:30:e9:16:1b:b1:91:fe:0e:c7:24:b8:fe:df:66:56:d6:8f:be:d0:7c:fd:f5:99:05:b8:fa:9a:e8:6e:89:1a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=www.witch.com

15/01/2023, 17:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree

Sections

_PAGELK
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_PAGELK
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_PAGELK
Size: 68KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_PAGELK
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a2833106949ae6e20c40ed0128f9df4b

Code Sign

38:2b:06:42:f2:7d:3c:b7:45:b8:54:93:9d:a5:e7:7eCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

d9:30:e9:16:1b:b1:91:fe:0e:c7:24:b8:fe:df:66:56:d6:8f:be:d0:7c:fd:f5:99:05:b8:fa:9a:e8:6e:89:1aSigner

Signature Validations

Verification

15/01/2023, 17:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

_PAGELK Size: - Virtual size: 140KB

_PAGELK Size: - Virtual size: 64KB

_PAGELK Size: 68KB - Virtual size: 76KB

_PAGELK Size: 1.2MB - Virtual size: 1.2MB

38:2b:06:42:f2:7d:3c:b7:45:b8:54:93:9d:a5:e7:7e
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

d9:30:e9:16:1b:b1:91:fe:0e:c7:24:b8:fe:df:66:56:d6:8f:be:d0:7c:fd:f5:99:05:b8:fa:9a:e8:6e:89:1a
Signer

15/01/2023, 17:55
Valid: false

_PAGELK
Size: - Virtual size: 140KB

_PAGELK
Size: - Virtual size: 64KB

_PAGELK
Size: 68KB - Virtual size: 76KB

_PAGELK
Size: 1.2MB - Virtual size: 1.2MB