a5c7049057360a281afc0213460769160e62b48431aaa85d247ce30aa2a50e6c

Sharing

Copy URL Twitter E-mail

General

Target

a5c7049057360a281afc0213460769160e62b48431aaa85d247ce30aa2a50e6c
Size

3.4MB
MD5

af14f5d6f1274ef27d78abd8d462410a
SHA1

0b4daa04f499b261334aedb535ea2e23937bd95b
SHA256

a5c7049057360a281afc0213460769160e62b48431aaa85d247ce30aa2a50e6c
SHA512

376b02083ea2276280d39ac74b656cdd71ad14784a06af144fa35a4540043cb2fe0e765e64342c4eb423378a9a20cfcce9c41a888cfebd7932e91221ffbdf5c6
SSDEEP

98304:iK1xSdXvKNmorEZCXZcVrx5EibycA63ZZQi/hmnbpHW0:tmohXZyTl+d63pmVL

Score

1^/10

Malware Config

Signatures

Files

a5c7049057360a281afc0213460769160e62b48431aaa85d247ce30aa2a50e6c
.exe windows x64

4f0aa5246671bac81facee87baa42ea8

Code Sign

09:94:80:69:8f:28:80:aa:5e:6c:ba:ce:72:f0:26:77
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/10/2020, 00:00

Not After

24/10/2022, 23:59

Subject

CN=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:a3:93:d9:3a:4c:cd:e4:6a:94:56:c5:5d:7c:e5:b8:07:81:00:32
Signer

Actual PE Digest

3f:a3:93:d9:3a:4c:cd:e4:6a:94:56:c5:5d:7c:e5:b8:07:81:00:32

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

30/03/2023, 10:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHGetDiskFreeSpaceA

mscoree

_CorExeMain

advapi32

RegisterEventSourceA

user32

ValidateRect

kernel32

GetModuleHandleA

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f0aa5246671bac81facee87baa42ea8

Code Sign

09:94:80:69:8f:28:80:aa:5e:6c:ba:ce:72:f0:26:77Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

3f:a3:93:d9:3a:4c:cd:e4:6a:94:56:c5:5d:7c:e5:b8:07:81:00:32Signer

Signature Validations

Verification

30/03/2023, 10:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

.data Size: - Virtual size: 1.1MB

.rsrc Size: 2.7MB - Virtual size: 2.7MB

.reloc Size: 102KB - Virtual size: 101KB

09:94:80:69:8f:28:80:aa:5e:6c:ba:ce:72:f0:26:77
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

3f:a3:93:d9:3a:4c:cd:e4:6a:94:56:c5:5d:7c:e5:b8:07:81:00:32
Signer

30/03/2023, 10:55
Valid: false

.data
Size: - Virtual size: 1.1MB

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

.reloc
Size: 102KB - Virtual size: 101KB