MDE_File_Sample_a268f01cbda5fd42c0ebaf3ff4fddec0ac824aac99da9f09abc4e7593fe1c3ea[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

MDE_File_Sample_a268f01cbda5fd42c0ebaf3ff4fddec0ac824aac99da9f09abc4e7593fe1c3ea.zip
Size

71KB
MD5

68be0e03ffd54cd032d1c94467de0dee
SHA1

bc1f502bba85943ac0a3a46c34a3f9f58baaf089
SHA256

52d1872719994c94605729d122af1818f6649a1e1f93a8d1a911220b0664a80e
SHA512

c86edaaf3910c11de63dd4f5c2708574c6bbd2351552f7afbdf68e6f3bf51e0aeb852e810dd8bf1a0e4b358261e88b8423c1818eb93e28d36460c91c48de2781
SSDEEP

1536:q8vZgfN2Z0KwYs8+kE9FZJZNg02iUp+ZfOEBK0d/:qQ2RKwYJ+kEz3LgT4VBK0d/

Score

1^/10

Malware Config

Signatures

Files

MDE_File_Sample_a268f01cbda5fd42c0ebaf3ff4fddec0ac824aac99da9f09abc4e7593fe1c3ea.zip
.zip

Password: 123
SDXHelper.exe
.exe windows:6 windows x64

Password: 123

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-02-2023 20:11

Not After

31-01-2024 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-02-2023 20:10

Not After

31-01-2024 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07
Signer

Actual PE Digest

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07

Digest Algorithm

sha256

PE Digest Matches

true

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07
Signer

Actual PE Digest

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 296B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07Signer

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 6KB - Virtual size: 8KB

.pdata Size: 5KB - Virtual size: 4KB

.didat Size: 1KB - Virtual size: 1KB

.c2r Size: 512B - Virtual size: 296B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07
Signer

07:78:0d:6f:35:c6:bb:16:93:1b:f6:0c:16:24:58:da:36:4b:ab:c1:0d:ad:e4:07:62:5f:a7:ed:d5:ed:2e:07
Signer

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 6KB - Virtual size: 8KB

.pdata
Size: 5KB - Virtual size: 4KB

.didat
Size: 1KB - Virtual size: 1KB

.c2r
Size: 512B - Virtual size: 296B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB