9a4dfa5835b58656750a72c8b033cade[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9a4dfa5835b58656750a72c8b033cade.exe
Size

3.6MB
MD5

9a4dfa5835b58656750a72c8b033cade
SHA1

51df0028ad30aa23da3df40e20cbe230df4ddc75
SHA256

ff4ff411ea80e2898e22d0530eecdfc4d68b526d5af98b21cc18dc72c32735a5
SHA512

53ce81240a6447817745d08bce7f6dc878097da45fa29f2dfb6ffd5949f056a8a9cc9e6e1a226ac55a18d1a8d022fa51406fc1204ed2b1d1833a292e0f62cc2d
SSDEEP

98304:1kL5KmCtgmeTu9h/UMK8AWljMpG0Voy/4IRRJ:1amqoGMKcVMpG8owBb

Score

1^/10

Malware Config

Signatures

Files

9a4dfa5835b58656750a72c8b033cade.exe
.exe windows x86

54f97145ccdcbc2e31f50113957801d6

Code Sign

Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

01/09/2009, 00:00

Not After

31/12/2037, 23:59

Subject

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:b7:e6:14:5c:69:ce:bd
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

10/06/2019, 22:49

Not After

24/07/2022, 21:21

Subject

CN=Acro Software Inc,O=Acro Software Inc,L=Haymarket,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

10:a4:3c:d6:22:36:a1:6b:8d:62:7b:fa:a0:53:26:71:5e:66:f0:0a
Signer

Actual PE Digest

10:a4:3c:d6:22:36:a1:6b:8d:62:7b:fa:a0:53:26:71:5e:66:f0:0a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Acro Software Inc,O=Acro Software Inc,L=Haymarket,ST=Virginia,C=US

11/05/2023, 10:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

GetUserNameW

user32

EnumDisplayDevicesA

gdi32

BitBlt

Sections

.MPRESS1
Size: 3.1MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 523KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

54f97145ccdcbc2e31f50113957801d6

Code Sign

Certificate

Key Usages

07Certificate

Key Usages

47:b7:e6:14:5c:69:ce:bdCertificate

Extended Key Usages

Key Usages

10:a4:3c:d6:22:36:a1:6b:8d:62:7b:fa:a0:53:26:71:5e:66:f0:0aSigner

Signature Validations

Verification

11/05/2023, 10:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

Sections

.MPRESS1 Size: 3.1MB - Virtual size: 6.0MB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 523KB - Virtual size: 523KB

07
Certificate

47:b7:e6:14:5c:69:ce:bd
Certificate

10:a4:3c:d6:22:36:a1:6b:8d:62:7b:fa:a0:53:26:71:5e:66:f0:0a
Signer

11/05/2023, 10:04
Valid: false

.MPRESS1
Size: 3.1MB - Virtual size: 6.0MB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 523KB - Virtual size: 523KB