3956af0e5d638e0e5f31e7d0aee863a5924adfe8bb1f7e182698368263c3f1a2

Sharing

Copy URL Twitter E-mail

General

Target

3956af0e5d638e0e5f31e7d0aee863a5924adfe8bb1f7e182698368263c3f1a2
Size

54KB
MD5

9df9dab576452d6fd9350eb5a9042b60
SHA1

1bc4bd19a9cb2ae787a6b195fbda79e1f1babbd2
SHA256

3956af0e5d638e0e5f31e7d0aee863a5924adfe8bb1f7e182698368263c3f1a2
SHA512

6cd630d0b9bbe047d6def3ff80ef58e3205967e2687b3340b56025e7c1bffb8433f4931e58a385919688b31d0ff22c761be2eb7bf94e0e2fd6d920ccc5281c60
SSDEEP

768:P5ZdjhyOdRkNqYcYW4Vq5XyLseTpVCHcxOXZFwobP5aEFiRQ7:P5pyOdRkkYW4/seTqHYOwobP4eii

Score

1^/10

Malware Config

Signatures

Files

3956af0e5d638e0e5f31e7d0aee863a5924adfe8bb1f7e182698368263c3f1a2
.exe windows x86

ba08763a44b2df1348caf7e2ca4d6e03

Code Sign

22:d6:05:52:5f:df:27:a2:4d:d2:6e:0d:52:68:d2:23
Certificate

Issuer

CN=Kinco,O=HMI,1.2.840.113549.1.9.1=#0c0e6c696e7979406b696e636f2e636e

Not Before

28/04/2023, 01:52

Not After

31/12/2039, 23:59

Subject

CN=Kinco,O=HMI,1.2.840.113549.1.9.1=#0c0e6c696e7979406b696e636f2e636e

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:3f:98:fe:cd:7e:83:18:40:c8:eb:6b:87:e8:22:6b:e4:88:2e:dc:0f:00:88:cf:af:d4:23:6b:93:99:ed:63
Signer

Actual PE Digest

7f:3f:98:fe:cd:7e:83:18:40:c8:eb:6b:87:e8:22:6b:e4:88:2e:dc:0f:00:88:cf:af:d4:23:6b:93:99:ed:63

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Kinco,O=HMI,1.2.840.113549.1.9.1=#0c0e6c696e7979406b696e636f2e636e

03/05/2023, 12:03
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
OutputDebugStringA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLastError
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba08763a44b2df1348caf7e2ca4d6e03

Code Sign

22:d6:05:52:5f:df:27:a2:4d:d2:6e:0d:52:68:d2:23Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

7f:3f:98:fe:cd:7e:83:18:40:c8:eb:6b:87:e8:22:6b:e4:88:2e:dc:0f:00:88:cf:af:d4:23:6b:93:99:ed:63Signer

Signature Validations

Verification

03/05/2023, 12:03 Valid: false

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 3KB

22:d6:05:52:5f:df:27:a2:4d:d2:6e:0d:52:68:d2:23
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

7f:3f:98:fe:cd:7e:83:18:40:c8:eb:6b:87:e8:22:6b:e4:88:2e:dc:0f:00:88:cf:af:d4:23:6b:93:99:ed:63
Signer

03/05/2023, 12:03
Valid: false

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 3KB