6330864da59c02a1f1b1f115b2ef8f03[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6330864da59c02a1f1b1f115b2ef8f03.exe
Size

2.1MB
MD5

6330864da59c02a1f1b1f115b2ef8f03
SHA1

eb36dc5c79253265a1dce2ab2a0589328d634fc6
SHA256

42ca92c215455e91c46822836f698229868e12f1fd1b855d4e886249b61d0d22
SHA512

69eb31cb0e5102a66fbd61d8f78fc687b307d631a1cce3270edcb56ba9df5bfbdfe3814155deaf0c848cd8525f894bbd3431c1d407e53afd1fbf1177d9a10a4b
SSDEEP

49152:Mb1fiyaG8JXSPn+FJLV1xjf9gfOYpwFIsuFhUiQyZqsub36k:MbXLpwB1xRgPM7uEiQOqP

Score

1^/10

Malware Config

Signatures

Files

6330864da59c02a1f1b1f115b2ef8f03.exe
.exe windows x86

55e66cf7b1d18be6c0f75bbeb93d5f93

Code Sign

Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

01/09/2009, 00:00

Not After

31/12/2037, 23:59

Subject

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:b7:e6:14:5c:69:ce:bd
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

10/06/2019, 22:49

Not After

24/07/2022, 21:21

Subject

CN=Acro Software Inc,O=Acro Software Inc,L=Haymarket,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

53:da:e1:b0:99:a6:1d:d3:09:23:65:03:cb:ee:c5:d1:5e:2a:05:da
Signer

Actual PE Digest

53:da:e1:b0:99:a6:1d:d3:09:23:65:03:cb:ee:c5:d1:5e:2a:05:da

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Acro Software Inc,O=Acro Software Inc,L=Haymarket,ST=Virginia,C=US

11/05/2023, 10:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoCreateInstance

oleaut32

SysFreeString

crypt32

CryptStringToBinaryA

Sections

.MPRESS1
Size: 1.9MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

55e66cf7b1d18be6c0f75bbeb93d5f93

Code Sign

Certificate

Key Usages

07Certificate

Key Usages

47:b7:e6:14:5c:69:ce:bdCertificate

Extended Key Usages

Key Usages

53:da:e1:b0:99:a6:1d:d3:09:23:65:03:cb:ee:c5:d1:5e:2a:05:daSigner

Signature Validations

Verification

11/05/2023, 10:09 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

oleaut32

crypt32

Sections

.MPRESS1 Size: 1.9MB - Virtual size: 4.7MB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 191KB - Virtual size: 191KB

07
Certificate

47:b7:e6:14:5c:69:ce:bd
Certificate

53:da:e1:b0:99:a6:1d:d3:09:23:65:03:cb:ee:c5:d1:5e:2a:05:da
Signer

11/05/2023, 10:09
Valid: false

.MPRESS1
Size: 1.9MB - Virtual size: 4.7MB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 191KB - Virtual size: 191KB