00034c849a303abd527994c04b06ed9281c75c07c5b83cdd201d1722bef23e22

Sharing

Copy URL Twitter E-mail

General

Target

00034c849a303abd527994c04b06ed9281c75c07c5b83cdd201d1722bef23e22
Size

611KB
MD5

ddf32f010c7323198c92d05f5fc2bc88
SHA1

ee40957d758c3ce6db843f0f7499a36e0234eb69
SHA256

00034c849a303abd527994c04b06ed9281c75c07c5b83cdd201d1722bef23e22
SHA512

862c008653ce2dab26b49885d910f45ba90d9e7de4c2f5fcfb9ff933b55bf0d56bbf174a1db31ec7e551bf1a4ba0051ce6e014de341aaed06694bcb2ead8328e
SSDEEP

12288:smJw5yO2NCH6OtTXnJg7obqvsu7OwUEqco:sW4yX0aWjnJrWaFP

Score

1^/10

Malware Config

Signatures

Files

00034c849a303abd527994c04b06ed9281c75c07c5b83cdd201d1722bef23e22
.exe windows:4 windows x64

bd868347eecedfb068b1210329a3172e

Code Sign

04
Certificate

Issuer

CN=Autoridade Certificadora Raiz Brasileira v5,OU=Instituto Nacional de Tecnologia da Informacao - ITI,O=ICP-Brasil,C=BR

Not Before

20/07/2016, 13:32

Not After

02/03/2029, 12:00

Subject

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02
Certificate

Issuer

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Not Before

08/12/2016, 17:44

Not After

20/02/2029, 17:44

Subject

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

74:65:4f:a1:61:bf:be:35:3f:61:61:d8:aa:a3:ce:e0
Certificate

Issuer

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Not Before

03/02/2023, 15:31

Not After

03/02/2024, 15:31

Subject

CN=AGUA LIMPA PAULISTA S A:09628437000149,OU=VideoConferencia+OU=23270084000189+OU=Secretaria da Receita Federal do Brasil - RFB+OU=RFB e-CNPJ A1,O=ICP-Brasil,L=Sao Paulo,ST=SP,C=BR

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageEmailProtection

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment

21:79:85:76:1d:c3:64:77:1e:e7:ed:a7:2b:c8:33:11:d4:dd:70:10:47:2d:1d:95:f8:e9:a6:85:69:0e:a6:31
Signer

Actual PE Digest

21:79:85:76:1d:c3:64:77:1e:e7:ed:a7:2b:c8:33:11:d4:dd:70:10:47:2d:1d:95:f8:e9:a6:85:69:0e:a6:31

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHGetIconOverlayIndexA

mscoree

_CorExeMain

advapi32

RegisterEventSourceA

user32

GetCursor

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 295KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd868347eecedfb068b1210329a3172e

Code Sign

04Certificate

Key Usages

02Certificate

Key Usages

74:65:4f:a1:61:bf:be:35:3f:61:61:d8:aa:a3:ce:e0Certificate

Extended Key Usages

Key Usages

21:79:85:76:1d:c3:64:77:1e:e7:ed:a7:2b:c8:33:11:d4:dd:70:10:47:2d:1d:95:f8:e9:a6:85:69:0e:a6:31Signer

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 281KB

.rsrc Size: 295KB - Virtual size: 549KB

Size: 102KB - Virtual size: 102KB

04
Certificate

02
Certificate

74:65:4f:a1:61:bf:be:35:3f:61:61:d8:aa:a3:ce:e0
Certificate

21:79:85:76:1d:c3:64:77:1e:e7:ed:a7:2b:c8:33:11:d4:dd:70:10:47:2d:1d:95:f8:e9:a6:85:69:0e:a6:31
Signer

.rsrc
Size: 295KB - Virtual size: 549KB