16928722248ab97627602d87d4978a8118bf28fb2111baf0221f51a017287cc9891798fd51646[.]dat-decoded

Sharing

Copy URL Twitter E-mail

General

Target

16928722248ab97627602d87d4978a8118bf28fb2111baf0221f51a017287cc9891798fd51646.dat-decoded
Size

299KB
MD5

ad284f0118757e2dc1270a4ae56e601b
SHA1

3b41df1094bdc0ddedfea762a830f5ae420d2352
SHA256

3e11161f4bf91d51026470f6a473e99eb2d778e73b2a124896412ddeaf2ee0cc
SHA512

b38b9fbbaff5415a6e6b6f2d1ca6fe445c7b16ec648c3b4989faba1e4741ff93c330bdea883cd5f93e93596f579d3416563e1dcde7bbbac8ed6da76b188028c5
SSDEEP

6144:168n/V8sHv4a/Ggztiw1p/UDUUuXXnoMf7/EB5QEq5h6:PV8sVGgAQp/UDUUg3oMf7/E0Eo6

Score

1^/10

Malware Config

Signatures

Files

16928722248ab97627602d87d4978a8118bf28fb2111baf0221f51a017287cc9891798fd51646.dat-decoded
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/05/2018, 00:00

Not After

15/05/2022, 23:59

Subject

CN=HeiDoc V.O.F.,O=HeiDoc V.O.F.,POSTALCODE=6291 HD,STREET=Ir Em Mélottestraat 33,L=Vaals,ST=Limburg,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:a3:38:eb:2d:79:c3:32:a4:e9:e0:e7:88:e1:d2:ff:ff:e5:75:17:f0:86:fe:8c:ed:92:5c:10:2f:63:24:1c
Signer

Actual PE Digest

4e:a3:38:eb:2d:79:c3:32:a4:e9:e0:e7:88:e1:d2:ff:ff:e5:75:17:f0:86:fe:8c:ed:92:5c:10:2f:63:24:1c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4e:a3:38:eb:2d:79:c3:32:a4:e9:e0:e7:88:e1:d2:ff:ff:e5:75:17:f0:86:fe:8c:ed:92:5c:10:2f:63:24:1cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 289KB - Virtual size: 288KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 12B

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4e:a3:38:eb:2d:79:c3:32:a4:e9:e0:e7:88:e1:d2:ff:ff:e5:75:17:f0:86:fe:8c:ed:92:5c:10:2f:63:24:1c
Signer

.text
Size: 289KB - Virtual size: 288KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B