zCgOrtSyN26U[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

zCgOrtSyN26U.exe
Size

42KB
MD5

95302613f43fe6b83c9528f88479d388
SHA1

9a96bc2c57bb825b3376136482dc6fcb0db3cd03
SHA256

543c66a984ff2998cfe281a88114aa5e84ef386f4207d9ab6145425e6063b4a4
SHA512

edbc9e7a8f880f079c1212294e9dc440b9b9e431d87a8c992c61cfe7687ae66f2977b9db00bd4db850d5dd19dbabf8f6682e8a8a406293eba1e2e11b34c21715
SSDEEP

768:Fa705P515WkDAYsAYNWaEsViragj09VCBJifMBi/30NZXggIiJ5yiRF:FaYYM3s3NBfVimgj0zgJifMQ3CZwlibB

Score

N/A

Malware Config

Signatures

Files

zCgOrtSyN26U.exe
.exe windows x64

Code Sign

5c:0f:a3:66:28:8a:d5:cd:2b:8e:31:34:0d:cd:a9:53
Certificate

Issuer

CN=RootLayer Web Services LTD,C=CN

Not Before

30/01/2023, 23:59

Not After

30/01/2024, 23:59

Subject

CN=RootLayer Web Services LTD,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:ba:54:50:4d:17:f8:da:92:74:4d:b4:f1:8e:33:2d:fa:31:f4:e3:a1:e9:51:9b:a3:f5:b7:ec:77:30:47:9d
Signer

Actual PE Digest

97:ba:54:50:4d:17:f8:da:92:74:4d:b4:f1:8e:33:2d:fa:31:f4:e3:a1:e9:51:9b:a3:f5:b7:ec:77:30:47:9d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=RootLayer Web Services LTD,C=CN

20/01/2023, 15:43
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

5c:0f:a3:66:28:8a:d5:cd:2b:8e:31:34:0d:cd:a9:53Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

97:ba:54:50:4d:17:f8:da:92:74:4d:b4:f1:8e:33:2d:fa:31:f4:e3:a1:e9:51:9b:a3:f5:b7:ec:77:30:47:9dSigner

Signature Validations

Verification

20/01/2023, 15:43 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 34KB - Virtual size: 34KB

.rsrc Size: 2KB - Virtual size: 1KB

5c:0f:a3:66:28:8a:d5:cd:2b:8e:31:34:0d:cd:a9:53
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

97:ba:54:50:4d:17:f8:da:92:74:4d:b4:f1:8e:33:2d:fa:31:f4:e3:a1:e9:51:9b:a3:f5:b7:ec:77:30:47:9d
Signer

20/01/2023, 15:43
Valid: false

.text
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 2KB - Virtual size: 1KB