1693844525085627b7cf9bc306aa266e9305a77ee0a76dfb7cfee5affb59f76267a08f6833347[.]dat-decoded[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1693844525085627b7cf9bc306aa266e9305a77ee0a76dfb7cfee5affb59f76267a08f6833347.dat-decoded.exe
Size

274KB
MD5

9f0aeff878befa2b72bbc2405581d78b
SHA1

2eeb08f4869864d14cab38d73dc539cde3077f60
SHA256

a1528f5de37b949354a3cdd6e72ac966b4a0ec675d7a23b67af482ddcb94616d
SHA512

a5a4a0df564466e11ba0a5ae61289155f35545eb1225a3d378c29f20d65375feec9e5d6f4f8b8048932de9d1999348edd710c70d677db67a438bba6444fdaa81
SSDEEP

3072:9pMF0t5OFxrHqMqZoeRcqs4sdtYS6Z02ljQEZ5URUxeE/RkJxKbzhe:/MK54xOMqZ/HaTYJ3cE/xNavKb0

Score

1^/10

Malware Config

Signatures

Files

1693844525085627b7cf9bc306aa266e9305a77ee0a76dfb7cfee5affb59f76267a08f6833347.dat-decoded.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15-05-2018 00:00

Not After

15-05-2022 23:59

Subject

CN=HeiDoc V.O.F.,O=HeiDoc V.O.F.,POSTALCODE=6291 HD,STREET=Ir Em Mélottestraat 33,L=Vaals,ST=Limburg,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:ad:43:06:04:a9:82:90:33:b7:69:bc:4e:99:9d:ce:6e:7c:51:9a:23:c6:8a:d2:6e:93:b9:5a:2c:4c:b2:b3
Signer

Actual PE Digest

7a:ad:43:06:04:a9:82:90:33:b7:69:bc:4e:99:9d:ce:6e:7c:51:9a:23:c6:8a:d2:6e:93:b9:5a:2c:4c:b2:b3

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

7a:ad:43:06:04:a9:82:90:33:b7:69:bc:4e:99:9d:ce:6e:7c:51:9a:23:c6:8a:d2:6e:93:b9:5a:2c:4c:b2:b3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 202KB - Virtual size: 202KB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 512B - Virtual size: 12B

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7a:ad:43:06:04:a9:82:90:33:b7:69:bc:4e:99:9d:ce:6e:7c:51:9a:23:c6:8a:d2:6e:93:b9:5a:2c:4c:b2:b3
Signer

.text
Size: 202KB - Virtual size: 202KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 512B - Virtual size: 12B