CrashHandler[.]data

Sharing

Copy URL

Twitter E-mail

General

Target

CrashHandler.data
Size

19.9MB
MD5

94bfa8a1e06c8d58799436998426c3c3
SHA1

9bf5f2d265f6ffa499a2998ac38cc168c53048b3
SHA256

c717a6332aa330833a5f5cd5d943f77c9fa1dd97e7ff95c7fdd6c72e9f61be0a
SHA512

9b72713a6d7a3ffea38b068d3a8a12b34d18cbbc8f0a3a4b06eee19f82523fa5b6a63d50862a4a68c2ab3d1226e2f42de521c1ba9ba61553482357ccd6cdbdd3
SSDEEP

393216:HK/Hegr97qY7OxBCi7GxtyuW+Ngp9wymDTXRtT1UMudtFeXWESNDZ43P5G6L8TYx:Hvk97f5tVDTX1UMpVCWoNjUoe9w6AAEc

Score

1^/10

Malware Config

Signatures

Files

CrashHandler.data
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7d:56:d0:a7:49:43:52:8c:4b:e8:5f:76:df:1d:46:61
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/05/2023, 17:50

Not After

26/05/2024, 15:00

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

3c:13:47:6f:3a:3b:26:ac:4a:00:3b:82:ff:3d:8f:b0
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/05/2023, 17:50

Not After

29/05/2038, 15:10

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:87:28:cc:2c:48:b5:e6:ef:df:5c:74:a9:5c:d6:b4:60:0e:1f:5d
Signer

Actual PE Digest

37:87:28:cc:2c:48:b5:e6:ef:df:5c:74:a9:5c:d6:b4:60:0e:1f:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19.9MB - Virtual size: 19.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7d:56:d0:a7:49:43:52:8c:4b:e8:5f:76:df:1d:46:61Certificate

Extended Key Usages

3c:13:47:6f:3a:3b:26:ac:4a:00:3b:82:ff:3d:8f:b0Certificate

Key Usages

37:87:28:cc:2c:48:b5:e6:ef:df:5c:74:a9:5c:d6:b4:60:0e:1f:5dSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 19.9MB - Virtual size: 19.9MB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

7d:56:d0:a7:49:43:52:8c:4b:e8:5f:76:df:1d:46:61
Certificate

3c:13:47:6f:3a:3b:26:ac:4a:00:3b:82:ff:3d:8f:b0
Certificate

37:87:28:cc:2c:48:b5:e6:ef:df:5c:74:a9:5c:d6:b4:60:0e:1f:5d
Signer

.text
Size: 19.9MB - Virtual size: 19.9MB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B