e434ec347a8ea1f0712561bccf0153468a943e16d2cd792fbc72720bd0a8002e

Sharing

Copy URL

Twitter E-mail

General

Target

e434ec347a8ea1f0712561bccf0153468a943e16d2cd792fbc72720bd0a8002e
Size

1.6MB
MD5

8f3ac02e38c6bcaaf235b1607886235a
SHA1

aeffc66ccb1f5750cc4c43ced237ea495b61053a
SHA256

e434ec347a8ea1f0712561bccf0153468a943e16d2cd792fbc72720bd0a8002e
SHA512

f79f8d8d76d5d1d6ed2dfcd23eaf9c487b107a6ef4813ddabf48c3393cb3e6997bfcfa6ff35684b9f8062aeb3188d99aee51a8700117c61ff10d31faeb7aa7b8
SSDEEP

24576:d2CRCYEuOEPx7ZNjV9zdEDO8AlwVeC2j5OO0nYbj6odrbb3a:dFXEuRdFWDO8AlgN29P0Ybhrbbq

Score

1^/10

Malware Config

Signatures

Files

e434ec347a8ea1f0712561bccf0153468a943e16d2cd792fbc72720bd0a8002e
.exe windows x64

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:56:27:08:9c:e6:58:cf:82:e4:8d:04
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

14/04/2021, 21:51

Not After

28/10/2023, 16:27

Subject

SERIALNUMBER=475036h,CN=Tonalio GmbH,O=Tonalio GmbH,STREET=Badner Strasse 8,L=Bad Voeslau,ST=Niederoesterreich,C=AT,1.2.840.113549.1.9.1=#0c106365727440746f6e616c696f2e636f6d,1.3.6.1.4.1.311.60.2.1.1=#130f5769656e6572204e65757374616474,1.3.6.1.4.1.311.60.2.1.2=#13114e69656465726f65737465727265696368,1.3.6.1.4.1.311.60.2.1.3=#13024154,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:5b:b4:d6:c4:f1:c5:1f:74:93:31:ac:86:69:57:aa:c3:5a:0b:9d:4e:26:c9:cf:85:5c:c8:04:9a:00:68:b6
Signer

Actual PE Digest

ff:5b:b4:d6:c4:f1:c5:1f:74:93:31:ac:86:69:57:aa:c3:5a:0b:9d:4e:26:c9:cf:85:5c:c8:04:9a:00:68:b6

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

BB0
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BB1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

60:56:27:08:9c:e6:58:cf:82:e4:8d:04Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ff:5b:b4:d6:c4:f1:c5:1f:74:93:31:ac:86:69:57:aa:c3:5a:0b:9d:4e:26:c9:cf:85:5c:c8:04:9a:00:68:b6Signer

Headers

DLL Characteristics

File Characteristics

Sections

BB0 Size: - Virtual size: 4.1MB

BB1 Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 217KB - Virtual size: 220KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

60:56:27:08:9c:e6:58:cf:82:e4:8d:04
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ff:5b:b4:d6:c4:f1:c5:1f:74:93:31:ac:86:69:57:aa:c3:5a:0b:9d:4e:26:c9:cf:85:5c:c8:04:9a:00:68:b6
Signer

BB0
Size: - Virtual size: 4.1MB

BB1
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 217KB - Virtual size: 220KB