v4[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

v4.exe
Size

10.2MB
MD5

77a2bf6e8153502ff8b2c5e6cfe2020d
SHA1

b2c3a5aa1172137113185deabbaf18a1150fd365
SHA256

7cef10a5bd4232b27df8e1b648b37ecfd5efcc7d35f674827ef5b45abc01f595
SHA512

3ea780b1f784caf466083cc660a74ff971643b391c10b8d8d82eefaa9c8fde72999f64b7f17ab1d8b249098b71a52912941fbd9f3a9a0dc04bb9431136492d25
SSDEEP

196608:sk0m8ebS5PHmjvlnNXwLrtrP3Ur6ufqBj9VH3ZU4p:sk0m8ebWPH6xwLrtD32vqBp

Score

1^/10

Malware Config

Signatures

Files

v4.exe
.exe windows x64

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:64:51:19:e7:90:fc:44:94:2a:ed:d0:dc:7f:b5:35
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22-02-2023 00:00

Not After

10-04-2023 23:59

Subject

CN=Manthe Industries\, LLC,O=Manthe Industries\, LLC,L=Green Bay,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

83:3e:f9:7b:3c:cb:a8:5c:51:78:a3:35:9e:51:1a:95:15:9a:f2:51
Signer

Actual PE Digest

83:3e:f9:7b:3c:cb:a8:5c:51:78:a3:35:9e:51:1a:95:15:9a:f2:51

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 776KB - Virtual size: 775KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 431KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 364B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:64:51:19:e7:90:fc:44:94:2a:ed:d0:dc:7f:b5:35Certificate

Extended Key Usages

Key Usages

83:3e:f9:7b:3c:cb:a8:5c:51:78:a3:35:9e:51:1a:95:15:9a:f2:51Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 776KB - Virtual size: 775KB

.data Size: 431KB - Virtual size: 489KB

.pdata Size: 178KB - Virtual size: 178KB

_RDATA Size: 512B - Virtual size: 348B

.data Size: 13KB - Virtual size: 13KB

.reloc Size: 32KB - Virtual size: 31KB

.idata Size: 2KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 9KB - Virtual size: 9KB

.text Size: - Virtual size: 8.8MB

.text Size: 6.1MB - Virtual size: 6.1MB

.data Size: 18KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 20KB

.reloc Size: 364B - Virtual size: 4KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:64:51:19:e7:90:fc:44:94:2a:ed:d0:dc:7f:b5:35
Certificate

83:3e:f9:7b:3c:cb:a8:5c:51:78:a3:35:9e:51:1a:95:15:9a:f2:51
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 776KB - Virtual size: 775KB

.data
Size: 431KB - Virtual size: 489KB

.pdata
Size: 178KB - Virtual size: 178KB

_RDATA
Size: 512B - Virtual size: 348B

.data
Size: 13KB - Virtual size: 13KB

.reloc
Size: 32KB - Virtual size: 31KB

.idata
Size: 2KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 9KB - Virtual size: 9KB

.text
Size: - Virtual size: 8.8MB

.text
Size: 6.1MB - Virtual size: 6.1MB

.data
Size: 18KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 20KB

.reloc
Size: 364B - Virtual size: 4KB