PO 1081467[.]tar[.]gz[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

PO 1081467.tar.gz.exe
Size

1.0MB
MD5

6fd645b5a35d9dd9bd5cb155f832c8fc
SHA1

0d2b0f4553d671f46a70a5c0187f8f5a6ff088a9
SHA256

57506d294214ba3afe56e339692a84c26217201f09b6f0b658c47ace11615d32
SHA512

4237f3c42e48752574675f31039c5a36d7593b4bbb3d5168e98d5ccfb03099b817626a9f85b9e427a0102c27afe0c5735189ee1a96f06238f8b9b2ef3c18b528
SSDEEP

24576:8XHj0BF3GDjNZdtxDLCXJfxRjGJfFzVTyj+v4:8X+cMNCfDTyj+v4

Score

1^/10

Malware Config

Signatures

Files

PO 1081467.tar.gz.exe
.tar
PO 1081467.exe
.exe windows x86

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-07-2014 20:32

Not After

01-10-2015 20:32

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:fc:63:3e:61:ac:87:92:28:dd:11:ea:8f:20:75:17:68:53:29:27:0b:29:c2:ef:ff:e8:24:6c:3c:fa:8c:7a
Signer

Actual PE Digest

30:fc:63:3e:61:ac:87:92:28:dd:11:ea:8f:20:75:17:68:53:29:27:0b:29:c2:ef:ff:e8:24:6c:3c:fa:8c:7a

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

13-04-2023 18:12
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 489KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

30:fc:63:3e:61:ac:87:92:28:dd:11:ea:8f:20:75:17:68:53:29:27:0b:29:c2:ef:ff:e8:24:6c:3c:fa:8c:7aSigner

Signature Validations

Verification

13-04-2023 18:12 Valid: false

Headers

File Characteristics

Sections

CODE Size: 489KB - Virtual size: 489KB

DATA Size: 5KB - Virtual size: 5KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 64B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 35KB - Virtual size: 35KB

.rsrc Size: 478KB - Virtual size: 477KB

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

30:fc:63:3e:61:ac:87:92:28:dd:11:ea:8f:20:75:17:68:53:29:27:0b:29:c2:ef:ff:e8:24:6c:3c:fa:8c:7a
Signer

13-04-2023 18:12
Valid: false

CODE
Size: 489KB - Virtual size: 489KB

DATA
Size: 5KB - Virtual size: 5KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 35KB - Virtual size: 35KB

.rsrc
Size: 478KB - Virtual size: 477KB