Contract_02_28_Scan#281[.]exe

Resubmissions

08-03-2023 00:19

230308-amkxjsce2s 10

05-03-2023 07:48

230305-jnk4daga67 10

Sharing

Copy URL

Twitter E-mail

General

Target

Contract_02_28_Scan#281.exe
Size

286KB
MD5

958bcd0ad0e363b5654c44eeb7e675fe
SHA1

ad524dcb31eda568b276f2af80cb3996f5c35be3
SHA256

cf3ccda4faf8ee78a9d65cd7ac61283a170ef4b4f18054362c4cd2d6d3a52be8
SHA512

26add44228437a8b2bbdaffc5b72b23dfb9e6a38dd026ce6afa6d4f6c14bb86dff83d787b1e36baf05e5b4c28c1e74a39770c15bc89a371d4caa21b9e95100de
SSDEEP

6144:bVVhBoNGz8Rf7NPTY5e3wogq3tWQKLcH1AAdUj8J96j7wWFR3rERjGeoiea8l3fe:3hBoNGz8Rf7NPTY5e3wogq3tWQKLcH1z

Score

1^/10

Malware Config

Signatures

Files

Contract_02_28_Scan#281.exe
.exe windows x64

7f252ab32d95da3c51f0ac0ae737d3b1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:da
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

31-10-2022 16:01

Not After

31-10-2023 15:58

Subject

SERIALNUMBER=NV20222585426,CN=DIGI CORP MEDIA LLC,O=DIGI CORP MEDIA LLC,L=Henderson,ST=Nevada,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

56:b6:29:cd:34:bc:78:f6
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

31-05-2017 18:14

Not After

30-05-2042 18:14

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26-03-2019 17:44

Not After

22-03-2034 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:8d:5b:00:0d:07:95:f3:03:80:91:7a:e2:ef:76:1d:9e:ba:68:32
Signer

Actual PE Digest

44:8d:5b:00:0d:07:95:f3:03:80:91:7a:e2:ef:76:1d:9e:ba:68:32

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=NV20222585426,CN=DIGI CORP MEDIA LLC,O=DIGI CORP MEDIA LLC,L=Henderson,ST=Nevada,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-01-0001 00:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetFileAttributesW
GlobalUnlock
GetLastError
GetCurrentDirectoryW
GlobalFree
CreateSemaphoreW
WriteFile
WaitForSingleObject
GlobalLock
CreateDirectoryW
LocalFree
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
GetFullPathNameW
ReleaseSemaphore
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
Sleep
MultiByteToWideChar
ReadFile
FileTimeToSystemTime
WideCharToMultiByte
GetFileInformationByHandle
GetVolumeNameForVolumeMountPointW
CloseHandle
FindNextFileW
FindClose
EnterCriticalSection
VerifyVersionInfoW
CreateFileW
LeaveCriticalSection
FindFirstFileExW
VerSetConditionMask
DosDateTimeToFileTime
FileTimeToDosDateTime
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalAlloc
SetErrorMode

user32

CreatePopupMenu
SendNotifyMessageA
SendMessageA
InvalidateRect
SetWindowTextA
SendMessageW
CreateMenu
EnableMenuItem
SetForegroundWindow
DestroyWindow
SetCursor
PostQuitMessage
IsIconic
GetWindowLongPtrW
SetMenu
IsWindowVisible
SetWindowLongPtrW
DestroyMenu
SetWindowTextW
CallWindowProcW
MoveWindow
TrackPopupMenu
DrawTextW
DrawEdge
CreateWindowExA
SetWindowPos
GetSysColorBrush
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
EndPaint
SetTimer
GetWindowRect
FillRect
MessageBoxA
DispatchMessageW
CheckMenuItem
DestroyIcon
InsertMenuItemA
GetSystemMetrics
MessageBoxW
CreateWindowExW
ShowWindow
ReleaseDC
SystemParametersInfoW
LoadIconW
RegisterClassExW
IsDialogMessageW
TranslateMessage
GetDC
LoadCursorW
KillTimer
DrawTextA
GetKeyState
GetClientRect
BeginPaint
OffsetRect
MonitorFromWindow
GetSysColor
GetCursorPos
GetMonitorInfoW
DefWindowProcW
CloseClipboard
SetFocus
EmptyClipboard
OpenClipboard
EnableWindow
SetClipboardData
GetMessageW

gdi32

CreateFontIndirectW
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SetBkColor
DeleteDC
SetTextColor
BitBlt
SetBkMode
DeleteObject
GetTextMetricsW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

CommandLineToArgvW
SHBrowseForFolderW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetFileInfoA

ole32

CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitializeEx

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__set_app_type
_encode_pointer
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_amsg_exit
??3@YAXPEAX@Z
__dllonexit
_lock
_onexit
_decode_pointer
tanh
memcmp
cos
acos
floor
pow
ceil
sin
tan
tanf
log
_unlock
_wcslwr_s
sinf
_wcstoui64
realloc
wcsncpy_s
_wcsicmp
wcschr
_beginthreadex
wcsnlen
_wcsnicmp
wcscpy_s
_scwprintf
wcstombs_s
strchr
_wcsdup
memcpy_s
wcsstr
_endthreadex
free
malloc
swprintf_s
towlower
sprintf_s

gdiplus

GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipLoadImageFromStreamICM
GdipFree
GdipLoadImageFromStream
GdipGetImageWidth
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipDrawImage
GdipScaleWorldTransform
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics

esent

JetTerm
JetMove
JetRetrieveColumns
JetOpenTable
JetCloseTable
JetEndSession
JetDetachDatabase
JetBeginSession
JetGetSystemParameter
JetOpenDatabase
JetInit
JetCloseDatabase
JetAttachDatabase
JetGetTableColumnInfo
JetCreateInstance
JetSetSystemParameter

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

7f252ab32d95da3c51f0ac0ae737d3b1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:daCertificate

Extended Key Usages

Key Usages

56:b6:29:cd:34:bc:78:f6Certificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

44:8d:5b:00:0d:07:95:f3:03:80:91:7a:e2:ef:76:1d:9e:ba:68:32Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

msvcr90

gdiplus

esent

Sections

.text Size: 208KB - Virtual size: 208KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 7KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 37KB - Virtual size: 37KB

.reloc Size: 512B - Virtual size: 156B

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

51:43:cf:38:d5:fd:26:85:88:30:82:66:32:be:9f:da
Certificate

56:b6:29:cd:34:bc:78:f6
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

44:8d:5b:00:0d:07:95:f3:03:80:91:7a:e2:ef:76:1d:9e:ba:68:32
Signer

01-01-0001 00:00
Valid: false

.text
Size: 208KB - Virtual size: 208KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 7KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 37KB - Virtual size: 37KB

.reloc
Size: 512B - Virtual size: 156B