sam (2)[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

sam (2).exe
Size

149KB
MD5

3dd4d3370a0273038d96f9a8fa98ba4f
SHA1

adad75881e1afaccc2d17588f5b055c2aa8a62e6
SHA256

57a8b2cc389c26ae00d69f9daae27412fc410d3dfd292698520ac280dd1fb110
SHA512

039b479ad8ecf47c68c95edd94155581115b7323e51953191c60c961dc2e53e515accc51c43447aa00229b6ebd5fd8f3460d24152b7731002070f36e481ff71f
SSDEEP

3072:YQdgGf6H6eC3x6oC18oQev4pfJAtf1ozc0vupDlwT2GZpftMLBzP9yZs15l:D56Hl4x6v9p41Jqf9hwT24KLBzPwZG

Score

1^/10

Malware Config

Signatures

Files

sam (2).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:cc:3a:25:bf:ba:44:ac:44:9a:9b:58:6b:43:39:aa
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-06-2010 21:57

Not After

23-06-2035 22:04

Subject

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:87:cb:c3:22:ea:a0:c8:fe:08:a7:18:92:2b:08:65:b7:3e:b3:0c:14:97:4b:22:3c:93:58:72:bf:53:a8:a3
Signer

Actual PE Digest

90:87:cb:c3:22:ea:a0:c8:fe:08:a7:18:92:2b:08:65:b7:3e:b3:0c:14:97:4b:22:3c:93:58:72:bf:53:a8:a3

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

23-03-2023 16:06
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8dCertificate

Extended Key Usages

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8dCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

28:cc:3a:25:bf:ba:44:ac:44:9a:9b:58:6b:43:39:aaCertificate

Key Usages

90:87:cb:c3:22:ea:a0:c8:fe:08:a7:18:92:2b:08:65:b7:3e:b3:0c:14:97:4b:22:3c:93:58:72:bf:53:a8:a3Signer

Signature Validations

Verification

23-03-2023 16:06 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 72KB - Virtual size: 71KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

28:cc:3a:25:bf:ba:44:ac:44:9a:9b:58:6b:43:39:aa
Certificate

90:87:cb:c3:22:ea:a0:c8:fe:08:a7:18:92:2b:08:65:b7:3e:b3:0c:14:97:4b:22:3c:93:58:72:bf:53:a8:a3
Signer

23-03-2023 16:06
Valid: false

.text
Size: 72KB - Virtual size: 71KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 512B - Virtual size: 12B