Cobaltbghdbghich13_browsingExe[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Cobaltbghdbghich13_browsingExe.exe
Size

63KB
MD5

d657568f8e43f34111509a5e8df9f8c7
SHA1

143a124ec51df1c4b378344fcb92850b11d8ed8d
SHA256

c56c915cd0bc528bdb21d6037917d2e4cde18b2ef27a4b74a0420a5f205869e6
SHA512

8cfb5609955a228851b2e252d9c5dd3824f49b8bf62de05a3c2bb4096539e7dcdd574bc42af9113e5d22ccf937cd16a4e3584aeb7409ad1930de4144050a84fd
SSDEEP

768:Ev0eEH6pOTYCbvsyXnzWW0Q0wqwWKYjKDNO9Fds7ZRAByGZolQKgP:EaHXYCzbV0BwQjMN6TstRABBOlQt

Score

1^/10

Malware Config

Signatures

Files

Cobaltbghdbghich13_browsingExe.exe
.exe windows x86

adeae189a2aa79f394957597c6fd82bc

Code Sign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:b3:a7:e5:59:fc:b0:24:c4:b6:6b:79:4e:95:40:cb
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/01/2018, 00:00

Not After

03/02/2021, 12:00

Subject

CN=Windscribe Limited,O=Windscribe Limited,L=Richmond Hill,ST=Ontario,C=CA,1.2.840.113549.1.9.1=#0c147965676f724077696e647363726962652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:27:9f:b6:d4:2f:70:a3:7e:41:25:65:a7:cd:ab:e5:c8:06:38:a6
Signer

Actual PE Digest

3f:27:9f:b6:d4:2f:70:a3:7e:41:25:65:a7:cd:ab:e5:c8:06:38:a6

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
ord697
ord513
ord516
ord519
ord556
ord704
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord618
ord541

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adeae189a2aa79f394957597c6fd82bc

Code Sign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

09:b3:a7:e5:59:fc:b0:24:c4:b6:6b:79:4e:95:40:cbCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

3f:27:9f:b6:d4:2f:70:a3:7e:41:25:65:a7:cd:ab:e5:c8:06:38:a6Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 35KB

.data Size: - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 15KB

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

09:b3:a7:e5:59:fc:b0:24:c4:b6:6b:79:4e:95:40:cb
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

3f:27:9f:b6:d4:2f:70:a3:7e:41:25:65:a7:cd:ab:e5:c8:06:38:a6
Signer

.text
Size: 36KB - Virtual size: 35KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 15KB