8ff341e8e113479f1c67f67ff1b9d875b76a0ac2fa2dfd0536a9800d0336632d

Sharing

Copy URL Twitter E-mail

General

Target

8ff341e8e113479f1c67f67ff1b9d875b76a0ac2fa2dfd0536a9800d0336632d
Size

41KB
MD5

e0ef0a0f6c8b8aa9623174860a0839d9
SHA1

3de27ba1922b389cc6caad786c2e7c6dd65ff6cd
SHA256

8ff341e8e113479f1c67f67ff1b9d875b76a0ac2fa2dfd0536a9800d0336632d
SHA512

cf41e6fd8b269c9037998664e958a24d614c878dccb83015a0fc264d940d9ecd62d067194f6c4e8bc4c9cc6d0837b3923de03496f4851769d35d943d3f49f211
SSDEEP

768:4BCO3ZYZdu/ccY9OFrrBYEczVx9zX3Rt/oC9zzi:4giMm5FrrBYLzVjzXhtAez

Score

1^/10

Malware Config

Signatures

Files

8ff341e8e113479f1c67f67ff1b9d875b76a0ac2fa2dfd0536a9800d0336632d
.exe windows x64

c624497640a8257a63c8a307a4c2c75e

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad
Signer

Actual PE Digest

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad

Digest Algorithm

sha256

PE Digest Matches

false

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad
Signer

Actual PE Digest

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_stat64
_time64
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c624497640a8257a63c8a307a4c2c75e

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:adSigner

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:adSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

winhttp

Sections

.text Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 240B

.rdata Size: 3KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 600B

.xdata Size: 512B - Virtual size: 492B

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad
Signer

c9:44:91:dc:00:17:de:38:e1:d5:d6:de:87:14:30:49:fb:53:4a:b5:21:30:79:4e:bc:9d:8e:b2:0a:89:d7:ad
Signer

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 240B

.rdata
Size: 3KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 600B

.xdata
Size: 512B - Virtual size: 492B

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B