79374C7B7F77DDD10E0BE942AB1F13C6[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

79374C7B7F77DDD10E0BE942AB1F13C6.exe
Size

3.3MB
MD5

79374c7b7f77ddd10e0be942ab1f13c6
SHA1

ac09addc8254dfb9afc8a130b9493794b99fda29
SHA256

33585c10e7e36caf96c35a586b1347f70167807db95ac0228f5575224d6cb1e1
SHA512

f0f722b3d4a58d84e08bfb73473f02f92b677db2c61c4f6679b0215b00db73238133ba0f23234ea615fe2dbf893407475e8cbfccb03d40902cf2dbc7190468a6
SSDEEP

98304:SAKCJwNJPOnEMaRxHjTN4PX15W75tTudAL2:R+POnEjSv152xs

Score

1^/10

Malware Config

Signatures

Files

79374C7B7F77DDD10E0BE942AB1F13C6.exe
.exe windows:1 windows x86

Code Sign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9b
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

23/01/2023, 06:51

Not After

23/01/2024, 06:51

Subject

CN=INTELSOFT-GRIGOROV\, KANEV I SIE,OU=Development,O=INTELSOFT-GRIGOROV\, KANEV I SIE,L=Sofia,C=BG

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9b
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

23/01/2023, 06:51

Not After

23/01/2024, 06:51

Subject

CN=INTELSOFT-GRIGOROV\, KANEV I SIE,OU=Development,O=INTELSOFT-GRIGOROV\, KANEV I SIE,L=Sofia,C=BG

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:86:ba:bd:4b:b5:ca:0f:2d:f6:ad:52:1b:60:3a:c6:8e:95:9e:d7:86:8f:ad:55:8f:f7:0e:21:16:86:bd:6b
Signer

Actual PE Digest

d0:86:ba:bd:4b:b5:ca:0f:2d:f6:ad:52:1b:60:3a:c6:8e:95:9e:d7:86:8f:ad:55:8f:f7:0e:21:16:86:bd:6b

Digest Algorithm

sha256

PE Digest Matches

true

bd:a8:16:1a:67:18:4d:c3:1a:8d:e5:a5:ef:15:e4:d3:a6:2c:3e:8f
Signer

Actual PE Digest

bd:a8:16:1a:67:18:4d:c3:1a:8d:e5:a5:ef:15:e4:d3:a6:2c:3e:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9bCertificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9bCertificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

d0:86:ba:bd:4b:b5:ca:0f:2d:f6:ad:52:1b:60:3a:c6:8e:95:9e:d7:86:8f:ad:55:8f:f7:0e:21:16:86:bd:6bSigner

bd:a8:16:1a:67:18:4d:c3:1a:8d:e5:a5:ef:15:e4:d3:a6:2c:3e:8fSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 37KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

64:33:51:d3:c7:38:9f:08
Certificate

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9b
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

34:51:90:e6:79:a4:61:f0:1f:0e:cf:87:16:d4:11:9b
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

d0:86:ba:bd:4b:b5:ca:0f:2d:f6:ad:52:1b:60:3a:c6:8e:95:9e:d7:86:8f:ad:55:8f:f7:0e:21:16:86:bd:6b
Signer

bd:a8:16:1a:67:18:4d:c3:1a:8d:e5:a5:ef:15:e4:d3:a6:2c:3e:8f
Signer

CODE
Size: 37KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB