816a4b9c7b8c637978fd108f72019dfa[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

816a4b9c7b8c637978fd108f72019dfa.exe
Size

20KB
MD5

816a4b9c7b8c637978fd108f72019dfa
SHA1

4fcbc5c57286d4f917b65b964f0b98ad413fcdf7
SHA256

c9246d579543364a991ae4fa9429e8c017da1ace8883e75072771602fab69205
SHA512

185867c52893774c2c8f234523796cd2eccafee51607865842b8e04d4026759ddca1607a8f202b6a2e1ff237d188d38da96cb3c5761ac82eb496b7c0b85d3b4d
SSDEEP

384:YfUfenBVqsa2pCb4ebJklcUzm4LxmsreGoGCJEF8ZpH2v:Y8mn61b44klUexm40EFiRI

Score

1^/10

Malware Config

Signatures

Files

816a4b9c7b8c637978fd108f72019dfa.exe
.exe windows x64

Code Sign

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60
Certificate

Issuer

CN=filenet Inc\ ,C=CN

Not Before

02/06/2023, 09:34

Not After

02/06/2024, 09:34

Subject

CN=filenet Inc\ ,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7
Signer

Actual PE Digest

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 12KB - Virtual size: 11KB

.rsrc Size: 2KB - Virtual size: 1KB

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7
Signer

.text
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 2KB - Virtual size: 1KB