Version5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Version5.exe
Size

33.7MB
MD5

e63439c139d51047e6d0a0461ffca618
SHA1

2ca8b725d95eb101393bb1f3e64523ce73d31027
SHA256

434c807bfd7d024b3d12fec10c9a2f493de62612d984abcc56007d5de583cf47
SHA512

0f0dd614102ff123fa6c7321cca1ce25375ba3915e2a0028f88e044c4643d2924312d99a538206e293e37b646c7dd045c93a8cc60f09d674aaf9492c142d74ec
SSDEEP

786432:guUMpD7WLcqoUHMJ9mJ8V64Wx7aXSYGFiuzF8KeVU:zD7Sc1UHMJQpUE8PVU

Score

1^/10

Malware Config

Signatures

Files

Version5.exe
.exe windows x64

98a2f629b464383d6fb604d83064af0c

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/08/2021, 00:00

Not After

27/09/2023, 23:59

Subject

SERIALNUMBER=1027739867473,CN=Kaspersky Lab JSC,O=Kaspersky Lab JSC,L=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/08/2021, 00:00

Not After

27/09/2023, 23:59

Subject

SERIALNUMBER=1027739867473,CN=Kaspersky Lab JSC,O=Kaspersky Lab JSC,L=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9b:43:87:fb:1b:94:62:82:69:25:e2:22:be:ef:80:a2:df:ca:b2:74:01:e5:99:3a:38:fb:21:9d:75:99:a2:52
Signer

Actual PE Digest

9b:43:87:fb:1b:94:62:82:69:25:e2:22:be:ef:80:a2:df:ca:b2:74:01:e5:99:3a:38:fb:21:9d:75:99:a2:52

Digest Algorithm

sha256

PE Digest Matches

false

ab:b5:f1:ed:a8:e6:07:fb:06:a2:83:d3:34:cf:ba:ac:10:5b:e6:20
Signer

Actual PE Digest

ab:b5:f1:ed:a8:e6:07:fb:06:a2:83:d3:34:cf:ba:ac:10:5b:e6:20

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxW

pdh

PdhAddEnglishCounterW

kernel32

LoadResource
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

iphlpapi

GetIfEntry2

netapi32

NetApiBufferFree

secur32

LsaFreeReturnBuffer

shell32

CommandLineToArgvW

advapi32

RegOpenKeyExW

ole32

CoSetProxyBlanket

ws2_32

WSASocketW

ntdll

RtlNtStatusToDosError

bcrypt

BCryptGenRandom

crypt32

CertDuplicateCertificateChain

powrprof

CallNtPowerInformation

oleaut32

GetErrorInfo

psapi

GetPerformanceInfo

Sections

.text
Size: - Virtual size: 982KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.git0
Size: - Virtual size: 20.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.git1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.git2
Size: 33.7MB - Virtual size: 33.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98a2f629b464383d6fb604d83064af0c

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76Certificate

Extended Key Usages

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76Certificate

Extended Key Usages

Key Usages

9b:43:87:fb:1b:94:62:82:69:25:e2:22:be:ef:80:a2:df:ca:b2:74:01:e5:99:3a:38:fb:21:9d:75:99:a2:52Signer

ab:b5:f1:ed:a8:e6:07:fb:06:a2:83:d3:34:cf:ba:ac:10:5b:e6:20Signer

Headers

DLL Characteristics

File Characteristics

Imports

user32

pdh

kernel32

iphlpapi

netapi32

secur32

shell32

advapi32

ole32

ws2_32

ntdll

bcrypt

crypt32

powrprof

oleaut32

psapi

Sections

.text Size: - Virtual size: 982KB

.rdata Size: - Virtual size: 461KB

.data Size: - Virtual size: 7KB

.pdata Size: - Virtual size: 32KB

_RDATA Size: - Virtual size: 348B

.git0 Size: - Virtual size: 20.3MB

.git1 Size: 4KB - Virtual size: 3KB

.git2 Size: 33.7MB - Virtual size: 33.7MB

.rsrc Size: 5KB - Virtual size: 5KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:8d:c5:9b:80:b3:ad:b6:e7:6b:7e:7f:ae:51:ef:76
Certificate

9b:43:87:fb:1b:94:62:82:69:25:e2:22:be:ef:80:a2:df:ca:b2:74:01:e5:99:3a:38:fb:21:9d:75:99:a2:52
Signer

ab:b5:f1:ed:a8:e6:07:fb:06:a2:83:d3:34:cf:ba:ac:10:5b:e6:20
Signer

.text
Size: - Virtual size: 982KB

.rdata
Size: - Virtual size: 461KB

.data
Size: - Virtual size: 7KB

.pdata
Size: - Virtual size: 32KB

_RDATA
Size: - Virtual size: 348B

.git0
Size: - Virtual size: 20.3MB

.git1
Size: 4KB - Virtual size: 3KB

.git2
Size: 33.7MB - Virtual size: 33.7MB

.rsrc
Size: 5KB - Virtual size: 5KB