e2db37adfe654f89ba93dc1538fedf3152b3098970b1c629df6fcb5548377a6d

Sharing

Copy URL Twitter E-mail

General

Target

e2db37adfe654f89ba93dc1538fedf3152b3098970b1c629df6fcb5548377a6d
Size

3.0MB
MD5

3658c8e6a37969dfc90f77ac44c1be46
SHA1

83c1198399d7c1f60575be0c7b024956b9c9faa4
SHA256

e2db37adfe654f89ba93dc1538fedf3152b3098970b1c629df6fcb5548377a6d
SHA512

17b4302047f41189e81e22409e22829d05335340aff3278fdf068d6683e7fbe301f9958608daa2337fa51e4182690f635e27409f4b0125ab4d143a031f1d8732
SSDEEP

49152:tKv551qL8scfAHj1C7OE3z3hx6wZ4tXHV0wWxfAfmRUVTJ8hrdbePcRhiOptnLUk:tIj4IsiYxC7jD6wEEaJwhbxoIyk

Score

1^/10

Malware Config

Signatures

Files

e2db37adfe654f89ba93dc1538fedf3152b3098970b1c629df6fcb5548377a6d
.exe windows:4 windows x64 arch:x64

12df002e4483bbc10372473604e73978

Code Sign

04
Certificate

Issuer

CN=Autoridade Certificadora Raiz Brasileira v5,OU=Instituto Nacional de Tecnologia da Informacao - ITI,O=ICP-Brasil,C=BR

Not Before

20/07/2016, 13:32

Not After

02/03/2029, 12:00

Subject

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02
Certificate

Issuer

CN=AC Secretaria da Receita Federal do Brasil v4,OU=Autoridade Certificadora Raiz Brasileira v5,O=ICP-Brasil,C=BR

Not Before

08/12/2016, 17:44

Not After

20/02/2029, 17:44

Subject

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2f
Certificate

Issuer

CN=AC Certisign RFB G5,OU=Secretaria da Receita Federal do Brasil - RFB,O=ICP-Brasil,C=BR

Not Before

15/12/2022, 13:53

Not After

15/12/2023, 13:53

Subject

CN=ALBIDANIA PARTNERS PARTICIPACOES LTDA:36740379000113,OU=VideoConferencia+OU=14397588000173+OU=Secretaria da Receita Federal do Brasil - RFB+OU=RFB e-CNPJ A1,O=ICP-Brasil,L=Sao Paulo,ST=SP,C=BR

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageEmailProtection

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment

67:fd:c0:3a:78:c6:bb:b3:b1:5b:a4:0d:c1:da:0a:72:c6:68:a4:13:06:d2:c4:ca:c0:9b:38:33:a1:45:1c:01
Signer

Actual PE Digest

67:fd:c0:3a:78:c6:bb:b3:b1:5b:a4:0d:c1:da:0a:72:c6:68:a4:13:06:d2:c4:ca:c0:9b:38:33:a1:45:1c:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHChangeNotifyRegister

mscoree

_CorExeMain

advapi32

GetUserNameW

user32

EndDialog

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

12df002e4483bbc10372473604e73978

Code Sign

04Certificate

Key Usages

02Certificate

Key Usages

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2fCertificate

Extended Key Usages

Key Usages

67:fd:c0:3a:78:c6:bb:b3:b1:5b:a4:0d:c1:da:0a:72:c6:68:a4:13:06:d2:c4:ca:c0:9b:38:33:a1:45:1c:01Signer

Headers

DLL Characteristics

File Characteristics

Imports

shell32

mscoree

advapi32

user32

kernel32

Sections

Size: - Virtual size: 1.9MB

.rsrc Size: 1000KB - Virtual size: 1000KB

Size: 102KB - Virtual size: 102KB

04
Certificate

02
Certificate

6f:b9:53:41:3d:15:d6:08:29:5e:d6:65:63:c8:f1:2f
Certificate

67:fd:c0:3a:78:c6:bb:b3:b1:5b:a4:0d:c1:da:0a:72:c6:68:a4:13:06:d2:c4:ca:c0:9b:38:33:a1:45:1c:01
Signer

.rsrc
Size: 1000KB - Virtual size: 1000KB