9cd88ddfe6478154ffbedf84e2455bdd636e8d6b129bb8729bcac8bfd6a35053

Sharing

Copy URL Twitter E-mail

General

Target

9cd88ddfe6478154ffbedf84e2455bdd636e8d6b129bb8729bcac8bfd6a35053
Size

39KB
MD5

7166d3833482381b61e5974dfab3c11a
SHA1

07f8d6ee2ed23e4f01b6dd234193cb301d86ffd8
SHA256

9cd88ddfe6478154ffbedf84e2455bdd636e8d6b129bb8729bcac8bfd6a35053
SHA512

31bc0aa0d6a7eb688716fe46696bd7aa5b7d5e26411bfb1f8d21b58884373f3e09b2f926e43ae697346c2c612fcacdfe7bb897b226a5656c6fd9d7fc1520e3e0
SSDEEP

768:8vtyveM+QbZdncnLzzVx9zX3Rt/oC9zzi:vvRzbZSzVjzXhtAez

Score

1^/10

Malware Config

Signatures

Files

9cd88ddfe6478154ffbedf84e2455bdd636e8d6b129bb8729bcac8bfd6a35053
.exe windows x64

049ae4c98bc894974e91502581cef7d9

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a
Signer

Actual PE Digest

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a

Digest Algorithm

sha256

PE Digest Matches

false

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a
Signer

Actual PE Digest

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
_stat64
_time64
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

049ae4c98bc894974e91502581cef7d9

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7aSigner

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7aSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

winhttp

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 240B

.rdata Size: 3KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 600B

.xdata Size: 512B - Virtual size: 492B

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a
Signer

3c:8e:47:60:57:55:5f:87:f8:30:58:17:21:fc:97:5f:58:4b:64:76:c4:a4:18:57:1a:c2:76:5d:cd:c8:c6:7a
Signer

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 240B

.rdata
Size: 3KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 600B

.xdata
Size: 512B - Virtual size: 492B

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B