cec6efe95cf4b67f6e265a116e5616957de52a38996413100db5d88b76444cda

Sharing

Copy URL Twitter E-mail

General

Target

cec6efe95cf4b67f6e265a116e5616957de52a38996413100db5d88b76444cda
Size

40KB
MD5

7a9307d934352508b874560bbf96756f
SHA1

52a6c300fc470056d5e223eb00a8cfbe9c60fa16
SHA256

cec6efe95cf4b67f6e265a116e5616957de52a38996413100db5d88b76444cda
SHA512

ccfb3f3caaa99f370f14469babd76d9532abe46af2fbc8472dfc1c61cc2f200289a057dd645124f29adb997792848ab68012241c0c213120cd6a9668c1212ee0
SSDEEP

768:ojqhNyYfXjN2cSp0zVx9zX3Rt/oC9zzi:lr1LN28zVjzXhtAez

Score

1^/10

Malware Config

Signatures

Files

cec6efe95cf4b67f6e265a116e5616957de52a38996413100db5d88b76444cda
.exe windows x64

28b399aba78acf1c2faf3f4dba6cbebc

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa
Signer

Actual PE Digest

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa

Digest Algorithm

sha256

PE Digest Matches

false

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa
Signer

Actual PE Digest

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_time64
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
memset
signal
strlen
strncmp
vfprintf

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28b399aba78acf1c2faf3f4dba6cbebc

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aaSigner

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aaSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

winhttp

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 224B

.rdata Size: 3KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 588B

.xdata Size: 512B - Virtual size: 476B

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa
Signer

2a:08:9b:4a:71:35:9e:74:f8:b1:d3:7d:b7:25:15:ce:56:6b:56:02:48:00:47:1c:c0:f6:58:1a:6a:44:6f:aa
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 224B

.rdata
Size: 3KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 588B

.xdata
Size: 512B - Virtual size: 476B

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B