8901545f57e875ed6c95fbaf3c714bee057856e77e2b0937fe244f5e92fb747e

Sharing

Copy URL Twitter E-mail

General

Target

8901545f57e875ed6c95fbaf3c714bee057856e77e2b0937fe244f5e92fb747e
Size

2.5MB
MD5

927cd4a4c7ad924b960257ede98314b6
SHA1

a5e5c47585a5b305d30d6a5472dae86968c5f579
SHA256

8901545f57e875ed6c95fbaf3c714bee057856e77e2b0937fe244f5e92fb747e
SHA512

62f1d982994f31c79269353e33fa075d229358073785519cc541ff25dd6a7a7a034c7cdc2bf8e2a77f257df7e71f75525dab3714e84664bd5c586a79cdc93225
SSDEEP

49152:lQH9iBf7m3SCNZYtCR65qk/GjJyV91GYPad7iP1dfhZZqVZkLukAm:2H8Bf7msNqOA0U3d7iPDfvZqVZTk5

Score

1^/10

Malware Config

Signatures

Files

8901545f57e875ed6c95fbaf3c714bee057856e77e2b0937fe244f5e92fb747e
.exe windows x86

ba61f7745afa73deae2b070b21ff1fc2

Code Sign

6f:e5:52:45:97:bf:d7:bf:4a:f7:0a:00:66:f1:90:fd
Certificate

Issuer

CN=www.tomb.com

Not Before

12/01/2023, 20:38

Not After

12/01/2024, 20:58

Subject

CN=www.tomb.com

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ec:92:b2:e3:ab:0f:5a:68:d6:b5:fa:fd:8a:64:63:25:0f:b1:d3:86:3a:6e:ac:2f:b2:6e:0a:4d:f7:1d:49:b5
Signer

Actual PE Digest

ec:92:b2:e3:ab:0f:5a:68:d6:b5:fa:fd:8a:64:63:25:0f:b1:d3:86:3a:6e:ac:2f:b2:6e:0a:4d:f7:1d:49:b5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=www.tomb.com

12/01/2023, 20:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA

advapi32

RegCloseKey

setupapi

SetupDiEnumDeviceInfo

Sections

.text
Size: 1024B - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba61f7745afa73deae2b070b21ff1fc2

Code Sign

6f:e5:52:45:97:bf:d7:bf:4a:f7:0a:00:66:f1:90:fdCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ec:92:b2:e3:ab:0f:5a:68:d6:b5:fa:fd:8a:64:63:25:0f:b1:d3:86:3a:6e:ac:2f:b2:6e:0a:4d:f7:1d:49:b5Signer

Signature Validations

Verification

12/01/2023, 20:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

setupapi

Sections

.text Size: 1024B - Virtual size: 888KB

.bss Size: - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 4KB

.rdata Size: 2.4MB - Virtual size: 2.4MB

6f:e5:52:45:97:bf:d7:bf:4a:f7:0a:00:66:f1:90:fd
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ec:92:b2:e3:ab:0f:5a:68:d6:b5:fa:fd:8a:64:63:25:0f:b1:d3:86:3a:6e:ac:2f:b2:6e:0a:4d:f7:1d:49:b5
Signer

12/01/2023, 20:51
Valid: false

.text
Size: 1024B - Virtual size: 888KB

.bss
Size: - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 4KB

.rdata
Size: 2.4MB - Virtual size: 2.4MB