UdhcjcrADe[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

UdhcjcrADe.exe
Size

3.5MB
MD5

a905147faa3cdd04b1637528185dcabc
SHA1

7747490b4ef3d6ff9bed0cd0c8fb534dfe2c5cd1
SHA256

7f408168c5e94b9ca304ac45b8cab0018252307729babb656dd037151178e87e
SHA512

cc02340a24fbdc2f84d45939a67beeae071773472812d1f86881ce43136d8abe956cc312a91cd78c67795a3ed7a92667338731f9e4244f586f42e880deaf21ff
SSDEEP

98304:NVs/dy7P0vK9XqnoDez8jPW1xAO1KW7m0cYcMB:NVs/dygKooDezGWLwakq

Score

1^/10

Malware Config

Signatures

Files

UdhcjcrADe.exe
.exe windows x64

2eabe9054cad5152567f0699947a2c5b

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:79:50:43:47:29:89:c9:db:9c:38:3e:06:be:1b:e4
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/04/2020, 00:00

Not After

10/04/2023, 12:00

Subject

CN=Manthe Industries\, LLC,O=Manthe Industries\, LLC,L=STEVENS POINT,ST=WISCONSIN,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:b6:0e:25:ee:91:44:66:6d:9a:fa:2b:82:37:53:0f:39:41:2e:8a
Signer

Actual PE Digest

65:b6:0e:25:ee:91:44:66:6d:9a:fa:2b:82:37:53:0f:39:41:2e:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Exports

Exports

?tim@@YA_KPEAX@Z
main

Sections

Size: 768KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zkkagbxl
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kpnhidfi
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2eabe9054cad5152567f0699947a2c5b

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0d:79:50:43:47:29:89:c9:db:9c:38:3e:06:be:1b:e4Certificate

Extended Key Usages

Key Usages

65:b6:0e:25:ee:91:44:66:6d:9a:fa:2b:82:37:53:0f:39:41:2e:8aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

Size: 768KB - Virtual size: 1.5MB

.rsrc Size: 512B - Virtual size: 480B

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 4.8MB

zkkagbxl Size: 2.7MB - Virtual size: 2.7MB

kpnhidfi Size: 512B - Virtual size: 4KB

.pdata Size: 46KB - Virtual size: 48KB

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0d:79:50:43:47:29:89:c9:db:9c:38:3e:06:be:1b:e4
Certificate

65:b6:0e:25:ee:91:44:66:6d:9a:fa:2b:82:37:53:0f:39:41:2e:8a
Signer

.rsrc
Size: 512B - Virtual size: 480B

.idata
Size: 512B - Virtual size: 4KB

zkkagbxl
Size: 2.7MB - Virtual size: 2.7MB

kpnhidfi
Size: 512B - Virtual size: 4KB

.pdata
Size: 46KB - Virtual size: 48KB