integra_obsidium1_8_podpis_integra[.]com[.]pl[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

integra_obsidium1_8_podpis_integra.com.pl.exe
Size

3.5MB
MD5

ecc1bacde587791746dfb5ccff64f0cb
SHA1

ccba096070cf18f94b47f71db703486e2878bc9b
SHA256

baf479f8b85d2a87dcaee3178983edaf92d0c72c2329b1925db6fb1e3329fb8b
SHA512

e70409853e15e6877fbea8231bf2bab4b9958905d3c9b52e0208c89657920bbc815898e166a09bd7ecc486e5d43c5d75ec50f0412243b638004df7652dd0a4a0
SSDEEP

49152:YkMD0AQtNhhe1XRc3VPm2FzSvzxt3PKnpn4Pz9XszfRKcu:BXDr3pm2FUHfL9cLRY

Score

1^/10

Malware Config

Signatures

Files

integra_obsidium1_8_podpis_integra.com.pl.exe
.exe windows x86

Password: Int123

899f4aa3dac9a5f3c6f57b97cc315663

Code Sign

26:dd:d2:2b:46:c9:c4:4d:5a:69:4d:39:80:7e:72:ad
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2014, 12:00

Not After

09/06/2027, 10:46

Subject

CN=Certum Domain Validation CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:a4:54:1c:fe:47:93:e7:74:55:5c:75:dc:e1:81:ea
Certificate

Issuer

CN=Certum Domain Validation CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

30/03/2023, 15:59

Not After

29/03/2024, 15:59

Subject

CN=*.integra.com.pl

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

56:82:3b:24:1c:2d:5b:ee:4f:b5:f3:12:5b:90:0b:6b:fa:75:98:6d:eb:2d:e5:16:32:dc:ad:34:36:d0:a2:55
Signer

Actual PE Digest

56:82:3b:24:1c:2d:5b:ee:4f:b5:f3:12:5b:90:0b:6b:fa:75:98:6d:eb:2d:e5:16:32:dc:ad:34:36:d0:a2:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

SystemParametersInfoA

advapi32

RegQueryValueExA

comctl32

InitMUILanguage

Sections

Size: - Virtual size: 4.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: Int123

899f4aa3dac9a5f3c6f57b97cc315663

Code Sign

26:dd:d2:2b:46:c9:c4:4d:5a:69:4d:39:80:7e:72:adCertificate

Key Usages

10:a4:54:1c:fe:47:93:e7:74:55:5c:75:dc:e1:81:eaCertificate

Extended Key Usages

Key Usages

56:82:3b:24:1c:2d:5b:ee:4f:b5:f3:12:5b:90:0b:6b:fa:75:98:6d:eb:2d:e5:16:32:dc:ad:34:36:d0:a2:55Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

Size: - Virtual size: 4.6MB

Size: 512B - Virtual size: 4KB

.rsrc Size: 1.5MB - Virtual size: 1.9MB

Size: 95KB - Virtual size: 96KB

26:dd:d2:2b:46:c9:c4:4d:5a:69:4d:39:80:7e:72:ad
Certificate

10:a4:54:1c:fe:47:93:e7:74:55:5c:75:dc:e1:81:ea
Certificate

56:82:3b:24:1c:2d:5b:ee:4f:b5:f3:12:5b:90:0b:6b:fa:75:98:6d:eb:2d:e5:16:32:dc:ad:34:36:d0:a2:55
Signer

.rsrc
Size: 1.5MB - Virtual size: 1.9MB