5b4690bac4384dee838025baa621b9e7ef15f1335e84fefbb53e3bb67763f8f6

Sharing

Copy URL Twitter E-mail

General

Target

5b4690bac4384dee838025baa621b9e7ef15f1335e84fefbb53e3bb67763f8f6
Size

1.0MB
MD5

72b7d69fc8ad4b85803bf4c07bdc8d85
SHA1

2ab0af6728768c12733821ff682f7fb4c06f2acb
SHA256

5b4690bac4384dee838025baa621b9e7ef15f1335e84fefbb53e3bb67763f8f6
SHA512

fc2b7be2630707c6fd09ea7a39ce1c8fb972d54d169e22774dba489863cb71f1d358c4ca60bc621595da958b2e65e4419292b0a7896bd99a74bc001314e30a11
SSDEEP

24576:QJJWc6SvcqSou4NYpW1F9ueyBKr3xHQfsB:CfNSXRw1mdlG

Score

1^/10

Malware Config

Signatures

Files

5b4690bac4384dee838025baa621b9e7ef15f1335e84fefbb53e3bb67763f8f6
.exe windows:4 windows x86

Code Sign

33:00:00:04:15:82:95:a1:a3:d8:2e:28:57:00:00:00:00:04:15
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/02/2023, 00:05

Not After

01/02/2024, 00:05

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:a6:1a:e0:07:d3:10:b3:4b:fc:77:33:56:82:8b:e3:f6:e5:cc:3d:ca:b0:39:36:fe:f4:20:bb:a7:ab:c7:c1
Signer

Actual PE Digest

16:a6:1a:e0:07:d3:10:b3:4b:fc:77:33:56:82:8b:e3:f6:e5:cc:3d:ca:b0:39:36:fe:f4:20:bb:a7:ab:c7:c1

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 803KB - Virtual size: 802KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:15:82:95:a1:a3:d8:2e:28:57:00:00:00:00:04:15Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

16:a6:1a:e0:07:d3:10:b3:4b:fc:77:33:56:82:8b:e3:f6:e5:cc:3d:ca:b0:39:36:fe:f4:20:bb:a7:ab:c7:c1Signer

Headers

File Characteristics

Sections

CODE Size: 803KB - Virtual size: 802KB

DATA Size: 10KB - Virtual size: 9KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 24B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 60KB - Virtual size: 60KB

.rsrc Size: 114KB - Virtual size: 114KB

33:00:00:04:15:82:95:a1:a3:d8:2e:28:57:00:00:00:00:04:15
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

16:a6:1a:e0:07:d3:10:b3:4b:fc:77:33:56:82:8b:e3:f6:e5:cc:3d:ca:b0:39:36:fe:f4:20:bb:a7:ab:c7:c1
Signer

CODE
Size: 803KB - Virtual size: 802KB

DATA
Size: 10KB - Virtual size: 9KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 24B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 114KB - Virtual size: 114KB