igcmdWin10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

igcmdWin10.exe
Size

216KB
MD5

c92c98ffa90315a02f3f06ca5477a56e
SHA1

2f907e783ffe5b86ef1ce73be3ff28651250d888
SHA256

48138ba5c2dee5da3ca1630bc85dd6be13201a97e3dcbeee61359472e9c88275
SHA512

5c83e974d67f6de1d0bd657c7bda878292f4c0773ef744a8c754583c955f23c8517c08745b1ad0738edf218e656d95e824b196d800a3db2f143d3d5697a7eeee
SSDEEP

3072:3QICSu0jtHFUyEFHbZOTANgWf/sB9fllyow+ugTHY3Gi7zgJSynl2Oz:3A6tHyBZ/sdw+dY3RsIOz

Score

1^/10

Malware Config

Signatures

Files

igcmdWin10.exe
.exe windows x64

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:54:d4:1e:6b:5c:2c:60:dc:a5:fe:7b:06:e0:5d:8e
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

14/01/2022, 09:36

Not After

14/01/2023, 09:36

Subject

CN=Duong Dieu Phap,O=Duong Dieu Phap,L=Tây Ninh,ST=Tây Ninh,C=VN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10/09/2021, 16:35

Not After

08/09/2031, 16:35

Subject

CN=SSL.com Timestamping Unit 2021,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:6b:8f:2d:86:2f:a9:bc:0d:49:ab:f6:73:bc:ab:b3:00:9a:38:75:42:69:5c:5b:a3:10:be:d4:59:25:f9:8c
Signer

Actual PE Digest

a3:6b:8f:2d:86:2f:a9:bc:0d:49:ab:f6:73:bc:ab:b3:00:9a:38:75:42:69:5c:5b:a3:10:be:d4:59:25:f9:8c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Duong Dieu Phap,O=Duong Dieu Phap,L=Tây Ninh,ST=Tây Ninh,C=VN

03/11/2022, 07:50
Valid: true

Chain 1

CN=Duong Dieu Phap,O=Duong Dieu Phap,L=Tây Ninh,ST=Tây Ninh,C=VN

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Chain 2

CN=Duong Dieu Phap,O=Duong Dieu Phap,L=Tây Ninh,ST=Tây Ninh,C=VN

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

13:54:d4:1e:6b:5c:2c:60:dc:a5:fe:7b:06:e0:5d:8eCertificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

a3:6b:8f:2d:86:2f:a9:bc:0d:49:ab:f6:73:bc:ab:b3:00:9a:38:75:42:69:5c:5b:a3:10:be:d4:59:25:f9:8cSigner

Signature Validations

Verification

03/11/2022, 07:50 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 202KB - Virtual size: 202KB

.rsrc Size: 2KB - Virtual size: 1KB

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

13:54:d4:1e:6b:5c:2c:60:dc:a5:fe:7b:06:e0:5d:8e
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

5f:1c:bc:8c:5c:3e:5f:6f:24:fd:3a:4f:e4:88:d6:28
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

a3:6b:8f:2d:86:2f:a9:bc:0d:49:ab:f6:73:bc:ab:b3:00:9a:38:75:42:69:5c:5b:a3:10:be:d4:59:25:f9:8c
Signer

03/11/2022, 07:50
Valid: true

.text
Size: 202KB - Virtual size: 202KB

.rsrc
Size: 2KB - Virtual size: 1KB