193BmJrNewKNavidCyTfHKVTRTT[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

193BmJrNewKNavidCyTfHKVTRTT.exe
Size

747KB
MD5

9327fe874de51b192e9030b4af3d228b
SHA1

8080f0ca6bc9ed1198200ce36b07a90da68d9743
SHA256

d57b0efbe8ef96aae35a5080531a4482a8acff36990b829b90c7b499bc1965e3
SHA512

61bd7ae235f6fb10207bc2a37e46a7330bc4fac7bf2e6eec249fb846fb311fb4eeba6e7bcef8b2c58c307f800b2790e47abf9c0ff2d6aed9a8ee96b68e4fa030
SSDEEP

12288:hKWq699k3jFguKOp9OeSK3t+zu+w6MtnEDbVXmhu6l8yDUiSu/kD8URI/q/A/AO:ITCuKyOeN3tt+onEDbN0l8yDUiSekDwF

Score

1^/10

Malware Config

Signatures

Files

193BmJrNewKNavidCyTfHKVTRTT.exe
.exe windows x64

Code Sign

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/11/2018, 00:00

Not After

17/11/2021, 12:00

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:e0:5a:38:57:35:2d:9b:f3:35:ef:ec:5e:51:a6:24:0c:b6:2b:2a:71:78:11:4e:4f:5f:92:fa:09:5d:ac:3b
Signer

Actual PE Digest

6f:e0:5a:38:57:35:2d:9b:f3:35:ef:ec:5e:51:a6:24:0c:b6:2b:2a:71:78:11:4e:4f:5f:92:fa:09:5d:ac:3b

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

03/02/2020, 16:51
Valid: true

Chain 1

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2fCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

6f:e0:5a:38:57:35:2d:9b:f3:35:ef:ec:5e:51:a6:24:0c:b6:2b:2a:71:78:11:4e:4f:5f:92:fa:09:5d:ac:3bSigner

Signature Validations

Verification

03/02/2020, 16:51 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 694KB - Virtual size: 694KB

.rsrc Size: 39KB - Virtual size: 38KB

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2f
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6f:e0:5a:38:57:35:2d:9b:f3:35:ef:ec:5e:51:a6:24:0c:b6:2b:2a:71:78:11:4e:4f:5f:92:fa:09:5d:ac:3b
Signer

03/02/2020, 16:51
Valid: true

.text
Size: 694KB - Virtual size: 694KB

.rsrc
Size: 39KB - Virtual size: 38KB