a2b6fc88f8d48ba3a9319a106c87cc1d[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

a2b6fc88f8d48ba3a9319a106c87cc1d.bin
Size

325KB
MD5

798fe191da468e0b46787b24d2877673
SHA1

12365498e00cc9dfad3aeff0803e31b30933742a
SHA256

8c71c95d44c2ebb9ea73df3dcdad66a4d700f7f2fe52ed5487b5c51873ffe92f
SHA512

b7460a2478cdb36d4d6123e2ca10a29e873099d5b40994e4bb0069bd734b6d0e9a7fac4fe6783cc97abce2bc8fb7fc00ad737056a5b9178306b177e1ec3e7106
SSDEEP

6144:fgMoW5g1sXG9aJvwIlVyje0tECyL2nJG/IMvW2xVOpzZPD00HXBS79Oy:YF/sXGsJvPlYp2CJno/Im7YpFLJXBS5D

Score

1^/10

Malware Config

Signatures

Files

a2b6fc88f8d48ba3a9319a106c87cc1d.bin
.zip

Password: infected
46f5c2493cf9015256aa234588a0ef1a9dfe0a37faaac1f1fb07a167e795372e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32
Certificate

Issuer

CN=Trustwave Global Code Signing CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

23/12/2022, 07:13

Not After

02/02/2026, 07:12

Subject

CN=TLauncher Inc.,O=TLauncher Inc.,L=Victoria,C=SC

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73
Certificate

Issuer

CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

06/02/2018, 12:21

Not After

21/08/2042, 18:21

Subject

CN=Trustwave Global Code Signing CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2a
Certificate

Issuer

CN=Viking Cloud TWG Timestamping CA\, Level 1,O=Viking Cloud\, Inc.,C=US

Not Before

10/08/2022, 10:55

Not After

06/11/2033, 16:55

Subject

CN=Viking Cloud TWG Timestamping Responder 2022,O=Viking Cloud\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9
Certificate

Issuer

CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

10/08/2022, 10:18

Not After

10/08/2037, 10:18

Subject

CN=Viking Cloud TWG Timestamping CA\, Level 1,O=Viking Cloud\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32
Certificate

Issuer

CN=Trustwave Global Code Signing CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

23/12/2022, 07:13

Not After

02/02/2026, 07:12

Subject

CN=TLauncher Inc.,O=TLauncher Inc.,L=Victoria,C=SC

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73
Certificate

Issuer

CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

06/02/2018, 12:21

Not After

21/08/2042, 18:21

Subject

CN=Trustwave Global Code Signing CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2a
Certificate

Issuer

CN=Viking Cloud TWG Timestamping CA\, Level 1,O=Viking Cloud\, Inc.,C=US

Not Before

10/08/2022, 10:55

Not After

06/11/2033, 16:55

Subject

CN=Viking Cloud TWG Timestamping Responder 2022,O=Viking Cloud\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9
Certificate

Issuer

CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

Not Before

10/08/2022, 10:18

Not After

10/08/2037, 10:18

Subject

CN=Viking Cloud TWG Timestamping CA\, Level 1,O=Viking Cloud\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:54:3d:c4:1a:1b:b8:51:d7:c9:a2:bf:60:87:39:5e:a0:d4:40:db:dc:a1:5e:66:db:95:59:74:d4:9e:68:d8
Signer

Actual PE Digest

0f:54:3d:c4:1a:1b:b8:51:d7:c9:a2:bf:60:87:39:5e:a0:d4:40:db:dc:a1:5e:66:db:95:59:74:d4:9e:68:d8

Digest Algorithm

sha256

PE Digest Matches

false

b4:15:54:5d:f7:4d:23:65:a7:b5:c9:34:b0:39:83:3e:12:57:49:91
Signer

Actual PE Digest

b4:15:54:5d:f7:4d:23:65:a7:b5:c9:34:b0:39:83:3e:12:57:49:91

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32Certificate

Extended Key Usages

Key Usages

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73Certificate

Extended Key Usages

Key Usages

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2aCertificate

Extended Key Usages

Key Usages

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9Certificate

Extended Key Usages

Key Usages

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32Certificate

Extended Key Usages

Key Usages

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73Certificate

Extended Key Usages

Key Usages

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2aCertificate

Extended Key Usages

Key Usages

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9Certificate

Extended Key Usages

Key Usages

0f:54:3d:c4:1a:1b:b8:51:d7:c9:a2:bf:60:87:39:5e:a0:d4:40:db:dc:a1:5e:66:db:95:59:74:d4:9e:68:d8Signer

b4:15:54:5d:f7:4d:23:65:a7:b5:c9:34:b0:39:83:3e:12:57:49:91Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 806KB - Virtual size: 806KB

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32
Certificate

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73
Certificate

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2a
Certificate

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9
Certificate

07:7f:22:38:be:42:10:bc:dd:a8:7c:d5:bd:db:90:61:80:9f:32
Certificate

06:ce:82:d9:b3:d4:98:74:56:05:d6:66:6b:6d:6d:99:7b:cb:73
Certificate

07:71:c2:62:80:b4:da:77:02:03:13:ab:bc:fa:a3:ff:ed:8b:2a
Certificate

07:71:c1:bc:fc:08:5f:97:f1:8c:6a:6a:23:c8:d3:7f:08:7d:f9
Certificate

0f:54:3d:c4:1a:1b:b8:51:d7:c9:a2:bf:60:87:39:5e:a0:d4:40:db:dc:a1:5e:66:db:95:59:74:d4:9e:68:d8
Signer

b4:15:54:5d:f7:4d:23:65:a7:b5:c9:34:b0:39:83:3e:12:57:49:91
Signer

.text
Size: 806KB - Virtual size: 806KB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B