Certify[.]exe | Triage

Sharing

General

Target

Certify.exe
Size

170KB
MD5

ae8a48081082b8fe467bf218fa9964e6
SHA1

0754a7810a72d5e8b99e0a8682b7996c235e479e
SHA256

af5c3a5f68323ac68b258dae37c20e48f594118d08479f92a78bd54d26debd9a
SHA512

5a8ff7d1c180381c33889ae59f808661d3202b3d63362eaa1ef7be7c1b244123e98961f34d5b3b46b7b01146c8f30d825ec00931e80e1718a97c0b051a296cd7
SSDEEP

3072:4kxK/NUc66+Irs3GuO/Clrp0Edu+fNcM6gM7QMN69M2bx9Bhlrw/kqS1:NxKF5rs3FO/erpF5Nns69M2bxjhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Certify.exe

Files

Certify.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ