246b67c9d63da010806eb030c199b66200aceb8fee04d76a459cad2f5289a1f9

Sharing

Copy URL Twitter E-mail

General

Target

246b67c9d63da010806eb030c199b66200aceb8fee04d76a459cad2f5289a1f9
Size

5.0MB
MD5

b33cf699186d2d3e8621a5384dc77a5f
SHA1

77788978342b4ee3c2e37905457602073eeb30f2
SHA256

246b67c9d63da010806eb030c199b66200aceb8fee04d76a459cad2f5289a1f9
SHA512

db962d1c5b8c16ec1f21332968ecd0a29459a93327c4f7bbd153916f938312eb74b6856174fdf0b8fb044a4a63bfc943d327107b0e23638cea18c6f36b751eae
SSDEEP

98304:C2mvwJrwxhPUW/k66SrmZlig7lYUFfS/E+KAm9v8KuJAzoyCyO4QS:/mvwh+hSRlJ7lYUF6/9KF8KxzPCVvS

Score

1^/10

Malware Config

Signatures

Files

246b67c9d63da010806eb030c199b66200aceb8fee04d76a459cad2f5289a1f9
.exe windows:6 windows x86 arch:x86

2fba41bb4e28cda4b02cb9f9f9b55758

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/06/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:60:c5:35:4d:86:1d:ed:2f:31:76:45:dc:3f:ab:ca
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

21/09/2021, 00:00

Not After

12/09/2024, 23:59

Subject

CN=Logitech Inc,O=Logitech Inc,L=Newark,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8e:40:7c:10:4f:40:3d:7d:ba:27:02:e5:cd:39:82:7b:32:f5:9b:c1:f5:e8:a7:2e:c5:92:dc:4c:88:ba:de:49
Signer

Actual PE Digest

8e:40:7c:10:4f:40:3d:7d:ba:27:02:e5:cd:39:82:7b:32:f5:9b:c1:f5:e8:a7:2e:c5:92:dc:4c:88:ba:de:49

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

shell32

SHGetFolderPathA

wininet

HttpOpenRequestA

ws2_32

closesocket

Sections

.MPRESS1
Size: 5.0MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2fba41bb4e28cda4b02cb9f9f9b55758

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

01:60:c5:35:4d:86:1d:ed:2f:31:76:45:dc:3f:ab:caCertificate

Extended Key Usages

Key Usages

8e:40:7c:10:4f:40:3d:7d:ba:27:02:e5:cd:39:82:7b:32:f5:9b:c1:f5:e8:a7:2e:c5:92:dc:4c:88:ba:de:49Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

wininet

ws2_32

Sections

.MPRESS1 Size: 5.0MB - Virtual size: 13.1MB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 10KB - Virtual size: 10KB

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

01:60:c5:35:4d:86:1d:ed:2f:31:76:45:dc:3f:ab:ca
Certificate

8e:40:7c:10:4f:40:3d:7d:ba:27:02:e5:cd:39:82:7b:32:f5:9b:c1:f5:e8:a7:2e:c5:92:dc:4c:88:ba:de:49
Signer

.MPRESS1
Size: 5.0MB - Virtual size: 13.1MB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 10KB - Virtual size: 10KB