sample2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sample2.exe
Size

320KB
MD5

dd28d9d57a68ccc08642bcecc72af54d
SHA1

54e78772ff546e0529e6df219bf92ddd87dc8749
SHA256

d1fe4cf589c8852fbc60fdcdc39bf944e27ccc2ae634b98ee841d9a9c4c6f55f
SHA512

2051456207248d51a6f838baa25208843f8115f5016a77a39a4dcc387ab98f820483dfd2434978d6c9029346d1874009d5d002bf60d2668c6b2aeb043e3a1631
SSDEEP

6144:5rwSOSu/CmfQnbol39kCUBDyTic+fZuWOuSzI:izD/Cmybobk5BeTic+BuWOuSzI

Score

1^/10

Malware Config

Signatures

Files

sample2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a9:e8:71:0b:b8:20:e7:a4
Certificate

Issuer

CN=ScopeLevel

Not Before

17/07/2021, 20:00

Not After

18/07/2024, 07:00

Subject

CN=ScopeLevel

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a9:e8:71:0b:b8:20:e7:a4
Certificate

Issuer

CN=ScopeLevel

Not Before

17/07/2021, 20:00

Not After

18/07/2024, 07:00

Subject

CN=ScopeLevel

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:ac:1a:d7:87:df:00:ed:50:ca:1d:f8:25:f5:15:78:38:19:2c:17:1b:6e:ba:53:b1:d8:34:53:1e:7b:12:53
Signer

Actual PE Digest

c1:ac:1a:d7:87:df:00:ed:50:ca:1d:f8:25:f5:15:78:38:19:2c:17:1b:6e:ba:53:b1:d8:34:53:1e:7b:12:53

Digest Algorithm

sha256

PE Digest Matches

false

19:a9:3a:61:d1:a5:ee:93:19:2e:f4:65:f7:40:91:e7:55:00:e3:d0
Signer

Actual PE Digest

19:a9:3a:61:d1:a5:ee:93:19:2e:f4:65:f7:40:91:e7:55:00:e3:d0

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a9:e8:71:0b:b8:20:e7:a4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

a9:e8:71:0b:b8:20:e7:a4Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

c1:ac:1a:d7:87:df:00:ed:50:ca:1d:f8:25:f5:15:78:38:19:2c:17:1b:6e:ba:53:b1:d8:34:53:1e:7b:12:53Signer

19:a9:3a:61:d1:a5:ee:93:19:2e:f4:65:f7:40:91:e7:55:00:e3:d0Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 239KB - Virtual size: 239KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 512B - Virtual size: 12B

a9:e8:71:0b:b8:20:e7:a4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

a9:e8:71:0b:b8:20:e7:a4
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

c1:ac:1a:d7:87:df:00:ed:50:ca:1d:f8:25:f5:15:78:38:19:2c:17:1b:6e:ba:53:b1:d8:34:53:1e:7b:12:53
Signer

19:a9:3a:61:d1:a5:ee:93:19:2e:f4:65:f7:40:91:e7:55:00:e3:d0
Signer

.text
Size: 239KB - Virtual size: 239KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 512B - Virtual size: 12B