Software[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Software.exe
Size

451.6MB
MD5

add79f7c34055a06fdc5a678ab90df9a
SHA1

4e40e32b70e94e5639705c8a57af0c2222017c0a
SHA256

e91dd55921207ac33afb14abdb130045d0ddebb599d0e600af54cc2afbf53595
SHA512

488131c210a373f18db38ea8bd1395531f7304edf0ef14c77f0c83074dbb095b4c6e714e3707bf596a515cf6ff01e9b0fa11af5b705e1ee6ccc8c81f214885f3
SSDEEP

12288:HyWACWeh3ih9H2qrNUQ3BBv+23Ra8iY8hYASbkVubEjElkcbyygC0KyhmU3b:HgCBYTjrNP3BgGhOTSYVSRg1hmU3b

Score

1^/10

Malware Config

Signatures

Files

Software.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1d:b1:b9:7f:bb:59:32:9f:4a:fa:6f:77:e5:73:45:90
Certificate

Issuer

CN=HDD`s Toshiba SATA-III 12Tb HDWG460EZSTA N300 (7200rpm) 4096Mb 2.5 Rtl

Not Before

29/01/2023, 18:12

Not After

30/01/2033, 18:12

Subject

CN=HDD`s Toshiba SATA-III 12Tb HDWG460EZSTA N300 (7200rpm) 4096Mb 2.5 Rtl

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:1e:df:72:73:52:57:21:9f:4b:b0:9b:66:48:b6:96:5b:52:6b:51:75:e2:fe:b5:1b:c7:ad:e6:fc:37:11:e6
Signer

Actual PE Digest

b5:1e:df:72:73:52:57:21:9f:4b:b0:9b:66:48:b6:96:5b:52:6b:51:75:e2:fe:b5:1b:c7:ad:e6:fc:37:11:e6

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=HDD`s Toshiba SATA-III 12Tb HDWG460EZSTA N300 (7200rpm) 4096Mb 2.5 Rtl

02/02/2023, 17:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 916KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1d:b1:b9:7f:bb:59:32:9f:4a:fa:6f:77:e5:73:45:90Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

b5:1e:df:72:73:52:57:21:9f:4b:b0:9b:66:48:b6:96:5b:52:6b:51:75:e2:fe:b5:1b:c7:ad:e6:fc:37:11:e6Signer

Signature Validations

Verification

02/02/2023, 17:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 916KB - Virtual size: 916KB

.rsrc Size: 136KB - Virtual size: 135KB

.reloc Size: 512B - Virtual size: 12B

1d:b1:b9:7f:bb:59:32:9f:4a:fa:6f:77:e5:73:45:90
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

b5:1e:df:72:73:52:57:21:9f:4b:b0:9b:66:48:b6:96:5b:52:6b:51:75:e2:fe:b5:1b:c7:ad:e6:fc:37:11:e6
Signer

02/02/2023, 17:54
Valid: false

.text
Size: 916KB - Virtual size: 916KB

.rsrc
Size: 136KB - Virtual size: 135KB

.reloc
Size: 512B - Virtual size: 12B