SuccubusAffection1[.]09E[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SuccubusAffection1.09E.exe
Size

3.0MB
MD5

4e168b9677f1c914fbfbafc2844ef67c
SHA1

942c1398f801e6bdcec164efa0870cacc6291785
SHA256

da027594789fdc531d8e7a0ea3f2e3ade9a62fddb78f6023442e88ab0ef75359
SHA512

7098a83c1b2b9695a260d4e99fa03623ed4c7372a09ae225402be0a5bf58959671f48ede343e22204d2bb956eac1368e900d7ace2d467ed871f1d473021b9c7b
SSDEEP

49152:wLicoeOTX5UC8EryUUVTLp919l5wkyALEXxX92p6N+MJhR:3LTX5tryUUVLpjVfyAcSpjMLR

Score

1^/10

Malware Config

Signatures

Files

SuccubusAffection1.09E.exe
.exe windows x86

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:73:11:b9:8a:b8:e0:cf:c3:37:da:32
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

19/03/2020, 06:44

Not After

09/07/2022, 07:44

Subject

CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign TSA for Standard - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01/09/1998, 12:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:50:3b:6b:c7:8a:cb:09:76:25:4e:9c:c3:e4:8d:db:35:cf:64:66
Signer

Actual PE Digest

2c:50:3b:6b:c7:8a:cb:09:76:25:4e:9c:c3:e4:8d:db:35:cf:64:66

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d

15/09/2020, 06:53
Valid: true

Chain 1

CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 552KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 449KB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

50:73:11:b9:8a:b8:e0:cf:c3:37:da:32Certificate

Extended Key Usages

Key Usages

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:dbCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:15:4b:5a:c3:94Certificate

Key Usages

2c:50:3b:6b:c7:8a:cb:09:76:25:4e:9c:c3:e4:8d:db:35:cf:64:66Signer

Signature Validations

Verification

15/09/2020, 06:53 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 23KB - Virtual size: 44KB

Size: 9KB - Virtual size: 24KB

Size: 512B - Virtual size: 8KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 556KB

Size: 3KB - Virtual size: 4KB

.rsrc Size: 552KB - Virtual size: 556KB

Size: 449KB - Virtual size: 6.9MB

.data Size: 2.0MB - Virtual size: 2.0MB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

50:73:11:b9:8a:b8:e0:cf:c3:37:da:32
Certificate

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

2c:50:3b:6b:c7:8a:cb:09:76:25:4e:9c:c3:e4:8d:db:35:cf:64:66
Signer

15/09/2020, 06:53
Valid: true

.rsrc
Size: 552KB - Virtual size: 556KB

.data
Size: 2.0MB - Virtual size: 2.0MB