update_2[.]81_v[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

update_2.81_v.exe
Size

52.5MB
MD5

5cfc625c8c3bf8b34649b5f84dccd579
SHA1

22181931d6d1963920a1f8b58879cf3dc5c1dafa
SHA256

875e4ab440cce1ba09ef8db636778033e4b308aff3634df8a26377feac52dec3
SHA512

4c3a42f4921978b93daafcc2d42af5aa5efcb20e65aef405b1f80b4730d8de27b821861456937a249ff0d5e7dc01ab18aec5485e5f7ae992b121a343a31e481b
SSDEEP

1572864:/9JD3rch3nfALyOkWfxl5x7fxYbJ5rLSS5glC:/9JDwdn475tfxYl9LDX

Score

1^/10

Malware Config

Signatures

Files

update_2.81_v.exe
.exe windows x64

22a71214a0c9214caa6b4dfa0b409cb5

Code Sign

09:90:7e:01:ed:c3:e3:4b:49:71:b2:a5:07:92:7b:6e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14/01/2022, 00:00

Not After

14/01/2023, 23:59

Subject

CN=Cisco Systems\, Inc.,O=Cisco Systems\, Inc.,L=Milpitas,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

95:82:5c:7d:3f:81:2e:02:f5:47:68:ba:79:ab:fa:57:01:f5:24:ba:dd:14:ce:54:56:1f:49:64:0d:50:b9:e7
Signer

Actual PE Digest

95:82:5c:7d:3f:81:2e:02:f5:47:68:ba:79:ab:fa:57:01:f5:24:ba:dd:14:ce:54:56:1f:49:64:0d:50:b9:e7

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetSystemMetrics

kernel32

FindResourceW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

CryptCreateHash

shell32

ShellExecuteExW

ole32

CoInitializeEx

crypt32

CryptDecodeObjectEx

ws2_32

WSAWaitForMultipleEvents

bcrypt

BCryptGenRandom

oleaut32

SysStringLen

Sections

.text
Size: - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ze190
Size: - Virtual size: 57.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ze191
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ze192
Size: 52.5MB - Virtual size: 52.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22a71214a0c9214caa6b4dfa0b409cb5

Code Sign

09:90:7e:01:ed:c3:e3:4b:49:71:b2:a5:07:92:7b:6eCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

95:82:5c:7d:3f:81:2e:02:f5:47:68:ba:79:ab:fa:57:01:f5:24:ba:dd:14:ce:54:56:1f:49:64:0d:50:b9:e7Signer

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

shell32

ole32

crypt32

ws2_32

bcrypt

oleaut32

Sections

.text Size: - Virtual size: 638KB

.rdata Size: - Virtual size: 180KB

.data Size: - Virtual size: 10KB

.pdata Size: - Virtual size: 22KB

_RDATA Size: - Virtual size: 348B

.ze190 Size: - Virtual size: 57.1MB

.ze191 Size: 4KB - Virtual size: 3KB

.ze192 Size: 52.5MB - Virtual size: 52.5MB

.reloc Size: 512B - Virtual size: 68B

.rsrc Size: 16KB - Virtual size: 16KB

09:90:7e:01:ed:c3:e3:4b:49:71:b2:a5:07:92:7b:6e
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

95:82:5c:7d:3f:81:2e:02:f5:47:68:ba:79:ab:fa:57:01:f5:24:ba:dd:14:ce:54:56:1f:49:64:0d:50:b9:e7
Signer

.text
Size: - Virtual size: 638KB

.rdata
Size: - Virtual size: 180KB

.data
Size: - Virtual size: 10KB

.pdata
Size: - Virtual size: 22KB

_RDATA
Size: - Virtual size: 348B

.ze190
Size: - Virtual size: 57.1MB

.ze191
Size: 4KB - Virtual size: 3KB

.ze192
Size: 52.5MB - Virtual size: 52.5MB

.reloc
Size: 512B - Virtual size: 68B

.rsrc
Size: 16KB - Virtual size: 16KB