Evony_3f0q3s27keg[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Evony_3f0q3s27keg.exe
Size

120.9MB
MD5

678e13083a940d0c89c769114a4d8e66
SHA1

96ed4c527a5915d5ed7671c183634bfeab4a6406
SHA256

b28baef3fd50e3af34fc9171b846a564bf0d29b4bc4df4fe481921a755fd6b31
SHA512

ccabbe36aaaf73de419ccbfd3e88292fbe38e6b724e4b2a5829be100d283611b50b2a642698d6468b69e2c3ac7b8b4135fd174e2b8cc71fb0a0a9bce006db284
SSDEEP

3145728:4SI1JXhf/BYN99iZUJ1JcWq7zi1RXTWT7sj0RmrdH:M1Vhf/yN99i44Pi1k7I0EJH

Score

1^/10

Malware Config

Signatures

Files

Evony_3f0q3s27keg.exe
.exe windows x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:54:06:a5:da:b5:d0:88:1d:22:4a:5d:86:9b:0a:a9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/04/2022, 00:00

Not After

13/04/2023, 23:59

Subject

CN=TOP GAMES INC.,O=TOP GAMES INC.,L=Sheung Wan,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

14:59:fa:d0:86:54:15:47:50:aa:a0:89:8e:ac:cb:5c:72:56:b3:10:76:9c:0a:26:6c:15:6c:59:8b:8b:78:f5
Signer

Actual PE Digest

14:59:fa:d0:86:54:15:47:50:aa:a0:89:8e:ac:cb:5c:72:56:b3:10:76:9c:0a:26:6c:15:6c:59:8b:8b:78:f5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=TOP GAMES INC.,O=TOP GAMES INC.,L=Sheung Wan,C=HK

23/03/2023, 16:17
Valid: true

Chain 1

CN=TOP GAMES INC.,O=TOP GAMES INC.,L=Sheung Wan,C=HK

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:54:06:a5:da:b5:d0:88:1d:22:4a:5d:86:9b:0a:a9Certificate

Extended Key Usages

Key Usages

14:59:fa:d0:86:54:15:47:50:aa:a0:89:8e:ac:cb:5c:72:56:b3:10:76:9c:0a:26:6c:15:6c:59:8b:8b:78:f5Signer

Signature Validations

Verification

23/03/2023, 16:17 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 37KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 10KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:54:06:a5:da:b5:d0:88:1d:22:4a:5d:86:9b:0a:a9
Certificate

14:59:fa:d0:86:54:15:47:50:aa:a0:89:8e:ac:cb:5c:72:56:b3:10:76:9c:0a:26:6c:15:6c:59:8b:8b:78:f5
Signer

23/03/2023, 16:17
Valid: true

CODE
Size: 37KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 10KB