Contract_02_28_Scan#203[.]exe

Resubmissions

08/03/2023, 01:11

230308-bj5cfscg2y 10

02/03/2023, 08:54

230302-kty3vsbg9s 10

Sharing

Copy URL Twitter E-mail

General

Target

Contract_02_28_Scan#203.exe
Size

287KB
MD5

3d0fe8bf962e9356b8ac2fd22cb2fd82
SHA1

4c104e67895a7ce6505095b4553c386f6166b6fd
SHA256

1134e24df540a5c996feeb1567960ea1df63467a78c909f53af01b0e5c800f5c
SHA512

12df1bb0eb1f7c07f4dd5426ef02645581b54a5b5176034bcc42fc8490a47393cc38ea43c9ad48ce9da636bca93f792a74e90d209ddc9bf4ceaa2d9afd760709
SSDEEP

6144:QVVhBoNGz8Rf7NPTY5e3wogq3tWQKLcH1AAdUj8J96j7wWFR3rERjGeoiea8l3fg:chBoNGz8Rf7NPTY5e3wogq3tWQKLcH1Z

Score

1^/10

Malware Config

Signatures

Files

Contract_02_28_Scan#203.exe
.exe windows x64

7f252ab32d95da3c51f0ac0ae737d3b1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:da
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

31/10/2022, 16:01

Not After

31/10/2023, 15:58

Subject

SERIALNUMBER=NV20222585426,CN=DIGI CORP MEDIA LLC,O=DIGI CORP MEDIA LLC,L=Henderson,ST=Nevada,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

56:b6:29:cd:34:bc:78:f6
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

31/05/2017, 18:14

Not After

30/05/2042, 18:14

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:8d:3d:68:9e:3f:84:3d:07:9e:fd:f2:43:7a:99:c2:21:fb:b3:04
Signer

Actual PE Digest

cc:8d:3d:68:9e:3f:84:3d:07:9e:fd:f2:43:7a:99:c2:21:fb:b3:04

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=NV20222585426,CN=DIGI CORP MEDIA LLC,O=DIGI CORP MEDIA LLC,L=Henderson,ST=Nevada,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01/01/0001, 00:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetFileAttributesW
GlobalUnlock
GetLastError
GetCurrentDirectoryW
GlobalFree
CreateSemaphoreW
WriteFile
WaitForSingleObject
GlobalLock
CreateDirectoryW
LocalFree
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
GetFullPathNameW
ReleaseSemaphore
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
Sleep
MultiByteToWideChar
ReadFile
FileTimeToSystemTime
WideCharToMultiByte
GetFileInformationByHandle
GetVolumeNameForVolumeMountPointW
CloseHandle
FindNextFileW
FindClose
EnterCriticalSection
VerifyVersionInfoW
CreateFileW
LeaveCriticalSection
FindFirstFileExW
VerSetConditionMask
DosDateTimeToFileTime
FileTimeToDosDateTime
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalAlloc
SetErrorMode

user32

CreatePopupMenu
SendNotifyMessageA
SendMessageA
InvalidateRect
SetWindowTextA
SendMessageW
CreateMenu
EnableMenuItem
SetForegroundWindow
DestroyWindow
SetCursor
PostQuitMessage
IsIconic
GetWindowLongPtrW
SetMenu
IsWindowVisible
SetWindowLongPtrW
DestroyMenu
SetWindowTextW
CallWindowProcW
MoveWindow
TrackPopupMenu
DrawTextW
DrawEdge
CreateWindowExA
SetWindowPos
GetSysColorBrush
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
EndPaint
SetTimer
GetWindowRect
FillRect
MessageBoxA
DispatchMessageW
CheckMenuItem
DestroyIcon
InsertMenuItemA
GetSystemMetrics
MessageBoxW
CreateWindowExW
ShowWindow
ReleaseDC
SystemParametersInfoW
LoadIconW
RegisterClassExW
IsDialogMessageW
TranslateMessage
GetDC
LoadCursorW
KillTimer
DrawTextA
GetKeyState
GetClientRect
BeginPaint
OffsetRect
MonitorFromWindow
GetSysColor
GetCursorPos
GetMonitorInfoW
DefWindowProcW
CloseClipboard
SetFocus
EmptyClipboard
OpenClipboard
EnableWindow
SetClipboardData
GetMessageW

gdi32

CreateFontIndirectW
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SetBkColor
DeleteDC
SetTextColor
BitBlt
SetBkMode
DeleteObject
GetTextMetricsW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

CommandLineToArgvW
SHBrowseForFolderW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetFileInfoA

ole32

CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitializeEx

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__set_app_type
_encode_pointer
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_amsg_exit
??3@YAXPEAX@Z
__dllonexit
_lock
_onexit
_decode_pointer
tanh
memcmp
cos
acos
floor
pow
ceil
sin
tan
tanf
log
_unlock
_wcslwr_s
sinf
_wcstoui64
realloc
wcsncpy_s
_wcsicmp
wcschr
_beginthreadex
wcsnlen
_wcsnicmp
wcscpy_s
_scwprintf
wcstombs_s
strchr
_wcsdup
memcpy_s
wcsstr
_endthreadex
free
malloc
swprintf_s
towlower
sprintf_s

gdiplus

GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipLoadImageFromStreamICM
GdipFree
GdipLoadImageFromStream
GdipGetImageWidth
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipDrawImage
GdipScaleWorldTransform
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics

esent

JetTerm
JetMove
JetRetrieveColumns
JetOpenTable
JetCloseTable
JetEndSession
JetDetachDatabase
JetBeginSession
JetGetSystemParameter
JetOpenDatabase
JetInit
JetCloseDatabase
JetAttachDatabase
JetGetTableColumnInfo
JetCreateInstance
JetSetSystemParameter

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

7f252ab32d95da3c51f0ac0ae737d3b1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:daCertificate

Extended Key Usages

Key Usages

56:b6:29:cd:34:bc:78:f6Certificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

cc:8d:3d:68:9e:3f:84:3d:07:9e:fd:f2:43:7a:99:c2:21:fb:b3:04Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

msvcr90

gdiplus

esent

Sections

.text Size: 208KB - Virtual size: 208KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 7KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 38KB - Virtual size: 37KB

.reloc Size: 512B - Virtual size: 156B

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:da
Certificate

56:b6:29:cd:34:bc:78:f6
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

cc:8d:3d:68:9e:3f:84:3d:07:9e:fd:f2:43:7a:99:c2:21:fb:b3:04
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 208KB - Virtual size: 208KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 7KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 38KB - Virtual size: 37KB

.reloc
Size: 512B - Virtual size: 156B