Deadside - Install[.]exe

Resubmissions

24/08/2023, 20:38

230824-ze1epshb6t 1

24/08/2023, 20:34

230824-zcjdeafd87 1

Sharing

Copy URL

Twitter E-mail

General

Target

Deadside - Install.exe
Size

42.8MB
MD5

cfd222b23f82bae86f1d9486d7142f18
SHA1

7eb7f3c44704ac378e5746de7822306e12cee4d3
SHA256

764c1efea5c9a519c2258b43f3553eaec80644592624dbb2298236510797a030
SHA512

8bae7ceb590648750a9d56ab48f04205e2d72d4c786709c972c0d6b70316f3fa06b072b0187ff121599c10beb5b70cd23f533b04dd5aef21bfb2e176e7bcd902
SSDEEP

786432:gjKmMepBa/jdoqt3InpnlX5Ki0kkSe6CDLLiQFBU3hl4va:CKmMWBS93YpXKh0C6E4lP

Score

1^/10

Malware Config

Signatures

Files

Deadside - Install.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

06:e0:2f:60:34:8e:c8:5d:cc:af:81:aa:69:6c:17:06:87:5b:72:37
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

06/08/2019, 20:50

Not After

06/08/2020, 20:50

Subject

CN=Rodger Monroe,C=Poland,1.2.840.113549.1.9.1=#0c116b3230336a676e33387362406f322e706c

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e5
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

17/04/2009, 13:22

Not After

15/03/2029, 12:59

Subject

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8a:3a:42:fe:14:4d:c9:98:b7:dc:3f:6f:5b:20:24:07:d4:ea:91:04
Signer

Actual PE Digest

8a:3a:42:fe:14:4d:c9:98:b7:dc:3f:6f:5b:20:24:07:d4:ea:91:04

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42.7MB - Virtual size: 42.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

06:e0:2f:60:34:8e:c8:5d:cc:af:81:aa:69:6c:17:06:87:5b:72:37Certificate

Extended Key Usages

Key Usages

e5Certificate

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

8a:3a:42:fe:14:4d:c9:98:b7:dc:3f:6f:5b:20:24:07:d4:ea:91:04Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 42.7MB - Virtual size: 42.7MB

.sdata Size: 512B - Virtual size: 174B

.rsrc Size: 85KB - Virtual size: 85KB

.reloc Size: 512B - Virtual size: 12B

06:e0:2f:60:34:8e:c8:5d:cc:af:81:aa:69:6c:17:06:87:5b:72:37
Certificate

e5
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

e6
Certificate

8a:3a:42:fe:14:4d:c9:98:b7:dc:3f:6f:5b:20:24:07:d4:ea:91:04
Signer

.text
Size: 42.7MB - Virtual size: 42.7MB

.sdata
Size: 512B - Virtual size: 174B

.rsrc
Size: 85KB - Virtual size: 85KB

.reloc
Size: 512B - Virtual size: 12B