d1763c5e7350363be6ac15ce51762a928800ee3d8b946304f490ca5e00127466

Sharing

Copy URL Twitter E-mail

General

Target

d1763c5e7350363be6ac15ce51762a928800ee3d8b946304f490ca5e00127466
Size

114KB
MD5

2b37e117fd83b852349c683c9fef59ac
SHA1

badbf6eca90a497544c6b81587e710743b0fcb4e
SHA256

d1763c5e7350363be6ac15ce51762a928800ee3d8b946304f490ca5e00127466
SHA512

8fcc4a84347fcd109019ca1e31fee64a67c3283511c987a437dcc2525679449f69d8b23e5ed00de644af159d2ec5c6687d88acad244f376e451e2928fe0f7b5d
SSDEEP

3072:z4XOEFT/8vt4Uk/y7lF8RJVjOpW6i4DX1V4U:M+EFThU0M8RLjOpnz1

Score

7^/10

Malware Config

Signatures

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
static1/unpack001/Aкт cвepки взaимopacчeтoв за период 01.09.2023 - 01.10.2023.exe	net_reactor

Files

d1763c5e7350363be6ac15ce51762a928800ee3d8b946304f490ca5e00127466
.zip
Aкт cвepки взaимopacчeтoв за период 01.09.2023 - 01.10.2023.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:dd
Certificate

Issuer

CN=Baltimore Software

Not Before

03/10/2023, 13:37

Not After

04/10/2033, 13:37

Subject

CN=Baltimore Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:dd
Certificate

Issuer

CN=Baltimore Software

Not Before

03/10/2023, 13:37

Not After

04/10/2033, 13:37

Subject

CN=Baltimore Software

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:be:2a:8e:ac:26:d8:fa:c2:b6:15:90:6f:02:40:d5:2b:27:46:11:c5:89:5f:ac:f1:6b:2a:57:23:45:2b:71
Signer

Actual PE Digest

52:be:2a:8e:ac:26:d8:fa:c2:b6:15:90:6f:02:40:d5:2b:27:46:11:c5:89:5f:ac:f1:6b:2a:57:23:45:2b:71

Digest Algorithm

sha256

PE Digest Matches

true

c3:e1:2a:30:a5:26:5b:90:7a:19:10:a6:5f:bf:e3:56:08:90:8f:7f
Signer

Actual PE Digest

c3:e1:2a:30:a5:26:5b:90:7a:19:10:a6:5f:bf:e3:56:08:90:8f:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Блaнк.doc
.doc windows office2003

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:ddCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:ddCertificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

52:be:2a:8e:ac:26:d8:fa:c2:b6:15:90:6f:02:40:d5:2b:27:46:11:c5:89:5f:ac:f1:6b:2a:57:23:45:2b:71Signer

c3:e1:2a:30:a5:26:5b:90:7a:19:10:a6:5f:bf:e3:56:08:90:8f:7fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 130KB - Virtual size: 130KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 512B - Virtual size: 12B

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:dd
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

7d:8e:4a:45:4a:49:85:b8:46:6c:fe:b5:4e:d4:0f:dd
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

52:be:2a:8e:ac:26:d8:fa:c2:b6:15:90:6f:02:40:d5:2b:27:46:11:c5:89:5f:ac:f1:6b:2a:57:23:45:2b:71
Signer

c3:e1:2a:30:a5:26:5b:90:7a:19:10:a6:5f:bf:e3:56:08:90:8f:7f
Signer

.text
Size: 130KB - Virtual size: 130KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 512B - Virtual size: 12B