new[.]exe | Triage

Resubmissions

23/03/2023, 02:10

230323-clxaasch97 1

23/03/2023, 02:09

230323-clltkach94 1

Sharing

Copy URL Twitter E-mail

General

Target

new.exe
Size

590KB
MD5

b2d8a6fd40735bb3a58d6173585e2d4b
SHA1

a6a38e39aeb53d6b1177ec0da7d1fb1ba6b4a990
SHA256

553211400fa0acf393b1ba131f46ee05c1a8506d51987454619559d0cb1d69cc
SHA512

f5b8fd112a044ece37ec32702cf022dceef29854b09125b35ad13057f52528dce35da7db053f4d71a29d9081b8186edc96839d9d708c36ccacc138da4f233158
SSDEEP

12288:GBTSZsZCa3hQsNiDxR6WA/I5AwJoQN64UhtfY2D:rCtRQZDb6WGXwJPk82D

Score

1^/10

Malware Config

Signatures

Files

new.exe
.exe windows x86

Code Sign

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:ca
Certificate

Issuer

CN=Eldon Tyrell,1.2.840.113549.1.9.1=#0c1c656c646f6e2e747972656c6c40747972656c6c2d636f72702e636f6d

Not Before

30/03/2022, 08:15

Not After

30/03/2023, 08:35

Subject

CN=Eldon Tyrell,1.2.840.113549.1.9.1=#0c1c656c646f6e2e747972656c6c40747972656c6c2d636f72702e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

29:df:39:2a:2c:93:de:7a:93:e2:9b:03:87:24:b1:23:28:1d:a1:b9:cf:7d:d8:4b:9a:14:49:1d:06:11:be:7a
Signer

Actual PE Digest

29:df:39:2a:2c:93:de:7a:93:e2:9b:03:87:24:b1:23:28:1d:a1:b9:cf:7d:d8:4b:9a:14:49:1d:06:11:be:7a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Eldon Tyrell,1.2.840.113549.1.9.1=#0c1c656c646f6e2e747972656c6c40747972656c6c2d636f72702e636f6d

21/03/2023, 12:24
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 391KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idlsym
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Code Sign

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:caCertificate

Extended Key Usages

Key Usages

29:df:39:2a:2c:93:de:7a:93:e2:9b:03:87:24:b1:23:28:1d:a1:b9:cf:7d:d8:4b:9a:14:49:1d:06:11:be:7aSigner

Signature Validations

Verification

21/03/2023, 12:24 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 47KB - Virtual size: 47KB

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 391KB - Virtual size: 451KB

.data Size: 3KB - Virtual size: 63KB

.rsrc Size: 110KB - Virtual size: 110KB

.reloc Size: 2KB - Virtual size: 1KB

.idlsym Size: 4KB - Virtual size: 4KB

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:ca
Certificate

29:df:39:2a:2c:93:de:7a:93:e2:9b:03:87:24:b1:23:28:1d:a1:b9:cf:7d:d8:4b:9a:14:49:1d:06:11:be:7a
Signer

21/03/2023, 12:24
Valid: false

.text
Size: 47KB - Virtual size: 47KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 391KB - Virtual size: 451KB

.data
Size: 3KB - Virtual size: 63KB

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 2KB - Virtual size: 1KB

.idlsym
Size: 4KB - Virtual size: 4KB