816a4b9c7b8c637978fd108f72019dfa[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

816a4b9c7b8c637978fd108f72019dfa.bin
Size

12KB
MD5

185a1b7279faba010ddefe9811a5349f
SHA1

864f2ba8fcc0c8559b864ef7643262c9caee87f8
SHA256

2a29b6b74db615eea52005ec442e57461c3fa4f1586698cef4c4215b8c92f7b8
SHA512

f8db5afd5ee0df54ccbbfcf8552d3683345c9fdbd609ef459675da52f375be3e3690a5da73499bea35d16978934af76b13a9a225495135cb1a66ed9761b7dda3
SSDEEP

192:rFOf6C48PdBtRkdrVTBNPsi8UI+JZSBCMf+sHmGVNJiqfo1YxLfiQX/j:rFOf6h8lBSdNPsB+mBusGGHo1YdBj

Score

1^/10

Malware Config

Signatures

Files

816a4b9c7b8c637978fd108f72019dfa.bin
.zip

Password: infected
c9246d579543364a991ae4fa9429e8c017da1ace8883e75072771602fab69205.exe
.exe windows x64

Password: infected

Code Sign

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60
Certificate

Issuer

CN=filenet Inc\ ,C=CN

Not Before

02/06/2023, 09:34

Not After

02/06/2024, 09:34

Subject

CN=filenet Inc\ ,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7
Signer

Actual PE Digest

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 12KB - Virtual size: 11KB

.rsrc Size: 2KB - Virtual size: 1KB

92:82:66:a7:60:f8:de:3c:d3:8c:d9:53:3a:33:0f:60
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

93:17:05:4f:2d:57:17:79:cf:86:e9:b0:40:c3:fc:ed:22:ef:8f:a6:96:d0:b7:e1:3d:3f:5d:9b:c6:2f:02:b7
Signer

.text
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 2KB - Virtual size: 1KB