af5b77e50d52155f52db90db3943ecb7[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

af5b77e50d52155f52db90db3943ecb7.exe
Size

8.4MB
MD5

af5b77e50d52155f52db90db3943ecb7
SHA1

262dbdf9ec8268934c8f11977800309a19f5d37c
SHA256

4bf527594f4b3c1e6a4fbc9527285c310693b1a79eb7b0a391fe4189b6a0bca5
SHA512

219c4d0d698b2da0c8e499c78a2de71bef0fac334d7f773748dc1a97334f5432422db7509e6626229523b7de421265cdfb30e39ac1399f77fb8685b4bf902105
SSDEEP

196608:w0HGPT5NMp19zesGfl7+aIRqwjnuvvqpoOXV+mMSt:hHGr5ip19zesGEjhjiiV+JA

Score

1^/10

Malware Config

Signatures

Files

af5b77e50d52155f52db90db3943ecb7.exe
.exe windows x86

c95fe71bb1921e8b227e790c40896544

Code Sign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:57:97:41:81:d1:09:95:4f:1c:10:95:8c:65:4e:63
Certificate

Issuer

CN=EdgeBuild,O=EdgeBuild,L=Redmond,ST=Washington,C=US

Not Before

15/06/2020, 23:52

Not After

31/12/2039, 23:59

Subject

CN=EdgeBuild,O=EdgeBuild,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5
Signer

Actual PE Digest

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5

Digest Algorithm

sha256

PE Digest Matches

false

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5
Signer

Actual PE Digest

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy

kernel32

lstrcatA
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e,q
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1JF
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.&8.
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c95fe71bb1921e8b227e790c40896544

Code Sign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

64:57:97:41:81:d1:09:95:4f:1c:10:95:8c:65:4e:63Certificate

Extended Key Usages

Key Usages

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5Signer

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5Signer

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: - Virtual size: 56KB

.rdata Size: - Virtual size: 12KB

.data Size: - Virtual size: 2.1MB

.e,q Size: - Virtual size: 4.3MB

.1JF Size: 512B - Virtual size: 468B

.&8. Size: 8.4MB - Virtual size: 8.4MB

.rsrc Size: 13KB - Virtual size: 12KB

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

64:57:97:41:81:d1:09:95:4f:1c:10:95:8c:65:4e:63
Certificate

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5
Signer

7d:ce:04:c5:51:4b:b3:4e:5b:47:0f:fa:e6:76:21:2c:35:cb:24:d7:a0:de:94:37:c0:61:ac:31:61:b0:73:e5
Signer

.text
Size: - Virtual size: 56KB

.rdata
Size: - Virtual size: 12KB

.data
Size: - Virtual size: 2.1MB

.e,q
Size: - Virtual size: 4.3MB

.1JF
Size: 512B - Virtual size: 468B

.&8.
Size: 8.4MB - Virtual size: 8.4MB

.rsrc
Size: 13KB - Virtual size: 12KB