6aef50562e3b2a5b93ba4b8a5c349814[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6aef50562e3b2a5b93ba4b8a5c349814.exe
Size

2.7MB
MD5

6aef50562e3b2a5b93ba4b8a5c349814
SHA1

2936ecdfc254c232b918b5b87698000063b42332
SHA256

13c51a33b44195c29f97d14decf56c3d6a0b9af2db57f157a872c165376a39f8
SHA512

1adb39f1154da5c4093c865996552320b22ec813432d3bea3eaab70597e4d9c5d9bc262a2a1daf7f11272181760093687381a5ae3113a1fb28e55e1271c5ef5c
SSDEEP

49152:IgvCZ3NZtPGqLq4dRX5pRjUMgc7JLN6E206W5kDg866lbkFjNnAMs1assprgpqog:xvChPtuIBDR77NN6/095Mg866qAMsrsm

Score

N/A

Malware Config

Signatures

Files

6aef50562e3b2a5b93ba4b8a5c349814.exe
.exe windows x86

9c119c0b545be0f5d03be66ae71633b8

Code Sign

15:ea:b0:44:46:b5:48:88:47:cd:12:d7:c5:53:74:ab
Certificate

Issuer

CN=www.indeed.com

Not Before

29/01/2023, 21:12

Not After

29/01/2024, 21:32

Subject

CN=www.indeed.com

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b2:a9:45:d1:e9:6b:88:46:33:f0:57:8e:69:ea:9c:18:af:22:ba:9b:4d:2d:83:05:cb:c8:d1:4b:30:60:be:98
Signer

Actual PE Digest

b2:a9:45:d1:e9:6b:88:46:33:f0:57:8e:69:ea:9c:18:af:22:ba:9b:4d:2d:83:05:cb:c8:d1:4b:30:60:be:98

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=www.indeed.com

29/01/2023, 21:27
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA

user32

GetForegroundWindow

Sections

.text
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 960KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c119c0b545be0f5d03be66ae71633b8

Code Sign

15:ea:b0:44:46:b5:48:88:47:cd:12:d7:c5:53:74:abCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

b2:a9:45:d1:e9:6b:88:46:33:f0:57:8e:69:ea:9c:18:af:22:ba:9b:4d:2d:83:05:cb:c8:d1:4b:30:60:be:98Signer

Signature Validations

Verification

29/01/2023, 21:27 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 4KB - Virtual size: 92KB

.bss Size: - Virtual size: 960KB

.rsrc Size: 68KB - Virtual size: 68KB

.rdata Size: 2.7MB - Virtual size: 2.7MB

15:ea:b0:44:46:b5:48:88:47:cd:12:d7:c5:53:74:ab
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

b2:a9:45:d1:e9:6b:88:46:33:f0:57:8e:69:ea:9c:18:af:22:ba:9b:4d:2d:83:05:cb:c8:d1:4b:30:60:be:98
Signer

29/01/2023, 21:27
Valid: false

.text
Size: 4KB - Virtual size: 92KB

.bss
Size: - Virtual size: 960KB

.rsrc
Size: 68KB - Virtual size: 68KB

.rdata
Size: 2.7MB - Virtual size: 2.7MB