02_Suporte_Remoto_Infiniway[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

02_Suporte_Remoto_Infiniway.exe
Size

8.6MB
MD5

6e6fafdc46deefdaa676e0233b7b48bf
SHA1

7e7afdd02eaf252bb7d5156c068088d1a7adea27
SHA256

59f4b9a41b33a3246d1ec3a7a2a9928d1f9e9cfbb685428becadb4f26e76693e
SHA512

a1d380796cd11a808d9b2b99e024c0313bf1bddaa778dc4e8e11e907f54c5eb59fb117d883331994450b8ec506f0dd6d99f2fb609a6ea9e0d7e3bae1e0ac9fde
SSDEEP

196608:gj6w9eaCi7B4PPpo73I/OxJh784KpTTsEYIX44J9:gv9eSE839hY443ZYA4I

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Files

02_Suporte_Remoto_Infiniway.exe
.exe windows x86

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04-03-2014 00:00

Not After

03-03-2024 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:ad
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

13-11-2018 00:00

Not After

02-12-2021 23:59

Subject

SERIALNUMBER=AP - 111997,CN=Nanosystems S.r.l.,OU=IT,O=Nanosystems S.r.l.,L=Ascoli Piceno,ST=Ascoli Piceno,C=IT,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130d4173636f6c6920506963656e6f,1.3.6.1.4.1.311.60.2.1.2=#130d4173636f6c6920506963656e6f,1.3.6.1.4.1.311.60.2.1.3=#13024954

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04-03-2014 00:00

Not After

03-03-2024 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:ad
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

13-11-2018 00:00

Not After

02-12-2021 23:59

Subject

SERIALNUMBER=AP - 111997,CN=Nanosystems S.r.l.,OU=IT,O=Nanosystems S.r.l.,L=Ascoli Piceno,ST=Ascoli Piceno,C=IT,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130d4173636f6c6920506963656e6f,1.3.6.1.4.1.311.60.2.1.2=#130d4173636f6c6920506963656e6f,1.3.6.1.4.1.311.60.2.1.3=#13024954

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:76:cc:52:c6:3b:1a:e0:05:cc:3b:e2:e4:01:94:72:8d:75:68:89:d7:7a:a5:8c:5c:a5:90:be:1d:35:2c:d5
Signer

Actual PE Digest

37:76:cc:52:c6:3b:1a:e0:05:cc:3b:e2:e4:01:94:72:8d:75:68:89:d7:7a:a5:8c:5c:a5:90:be:1d:35:2c:d5

Digest Algorithm

sha256

PE Digest Matches

true

8c:40:23:5a:c0:90:f8:af:3b:f5:53:c6:da:b3:98:e5:a3:5d:80:24
Signer

Actual PE Digest

8c:40:23:5a:c0:90:f8:af:3b:f5:53:c6:da:b3:98:e5:a3:5d:80:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 29.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:adCertificate

Extended Key Usages

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:adCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

37:76:cc:52:c6:3b:1a:e0:05:cc:3b:e2:e4:01:94:72:8d:75:68:89:d7:7a:a5:8c:5c:a5:90:be:1d:35:2c:d5Signer

8c:40:23:5a:c0:90:f8:af:3b:f5:53:c6:da:b3:98:e5:a3:5d:80:24Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 29.3MB

UPX1 Size: 8.4MB - Virtual size: 8.4MB

.rsrc Size: 123KB - Virtual size: 124KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:ad
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

33:19:4c:a1:08:f7:09:f0:d5:35:69:cf:06:aa:ed:ad
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

37:76:cc:52:c6:3b:1a:e0:05:cc:3b:e2:e4:01:94:72:8d:75:68:89:d7:7a:a5:8c:5c:a5:90:be:1d:35:2c:d5
Signer

8c:40:23:5a:c0:90:f8:af:3b:f5:53:c6:da:b3:98:e5:a3:5d:80:24
Signer

UPX0
Size: - Virtual size: 29.3MB

UPX1
Size: 8.4MB - Virtual size: 8.4MB

.rsrc
Size: 123KB - Virtual size: 124KB