0bd27d2500a2517a830fe451e0430676d0cda03ff4ca4f1e5de1b772254c47b6

Sharing

Copy URL

Twitter E-mail

General

Target

0bd27d2500a2517a830fe451e0430676d0cda03ff4ca4f1e5de1b772254c47b6
Size

2.3MB
MD5

d493952b6d53bb0bef7763a32e0201ba
SHA1

a45bb206c9bd2a28644ba7070fae3fe48133f486
SHA256

0bd27d2500a2517a830fe451e0430676d0cda03ff4ca4f1e5de1b772254c47b6
SHA512

248137d9d91f5d1aa941b0269ed165feb34aa7a152cdd7034133b39a16f71649140ddd4db887be2b13f1480aa82a287e11eafc62784b2fcd2f883e4e987aa70e
SSDEEP

49152:GPvkK66wOpKQ113en1aFV5tKz3vhPYzBfynpSvb:X9DB61OnUFVzK6Bqnsb

Score

1^/10

Malware Config

Signatures

Files

0bd27d2500a2517a830fe451e0430676d0cda03ff4ca4f1e5de1b772254c47b6
.exe windows:4 windows x64 arch:x64

da9845337ed866f3de09b37dfc458e1c

Code Sign

04
Certificate

Issuer

CN=Autoridade Certificadora Raiz Brasileira v5,OU=Instituto Nacional de Tecnologia da Informacao - ITI,O=ICP-Brasil,C=BR

Not Before

20-07-2016 13:32

Not After

02-03-2029 12:00

Subject

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02
Certificate

Issuer

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Not Before

08-12-2016 17:44

Not After

20-02-2029 17:44

Subject

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2f
Certificate

Issuer

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Not Before

15-12-2022 13:53

Not After

15-12-2023 13:53

Subject

CN=ALBIDANIA PARTNERS PARTICIPACOES LTDA:36740379000113,OU=VideoConferencia+OU=14397588000173+OU=Secretaria da Receita Federal do Brasil - RFB+OU=RFB e-CNPJ A1,O=ICP-Brasil,L=Sao Paulo,ST=SP,C=BR

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageEmailProtection

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment

60:61:f1:52:d6:d1:ba:86:4c:92:16:cf:c2:5f:1d:5f:d7:f2:24:31:9b:02:02:db:d1:43:d4:38:a1:3f:ad:7a
Signer

Actual PE Digest

60:61:f1:52:d6:d1:ba:86:4c:92:16:cf:c2:5f:1d:5f:d7:f2:24:31:9b:02:02:db:d1:43:d4:38:a1:3f:ad:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHChangeNotifyRegister

mscoree

_CorExeMain

advapi32

RegQueryValueA

user32

UpdateWindow

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 211KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

da9845337ed866f3de09b37dfc458e1c

Code Sign

04Certificate

Key Usages

02Certificate

Key Usages

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2fCertificate

Extended Key Usages

Key Usages

60:61:f1:52:d6:d1:ba:86:4c:92:16:cf:c2:5f:1d:5f:d7:f2:24:31:9b:02:02:db:d1:43:d4:38:a1:3f:ad:7aSigner

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 1.9MB

.rsrc Size: 211KB - Virtual size: 324KB

Size: 102KB - Virtual size: 102KB

04
Certificate

02
Certificate

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2f
Certificate

60:61:f1:52:d6:d1:ba:86:4c:92:16:cf:c2:5f:1d:5f:d7:f2:24:31:9b:02:02:db:d1:43:d4:38:a1:3f:ad:7a
Signer

.rsrc
Size: 211KB - Virtual size: 324KB