22bb674ee9614e836f57938022306ecc

Sharing

Copy URL Twitter E-mail

General

Target

22bb674ee9614e836f57938022306ecc
Size

1.1MB
MD5

22bb674ee9614e836f57938022306ecc
SHA1

8437c0e69e987c01d7947dfc716caa15bf4f97b1
SHA256

a90e56a7b28e6e1ec2e6cf00f3497039077d2daf460a74c0b44782978399981c
SHA512

e71db92cb29e2565a64d6dfc21a48ac5cbc7a3d7770f4e4c5637bcd41613aec41ff17500728a2514b48a12f38ff0d72827ae204a725bc06f848030c2be241858
SSDEEP

24576:u/R9vRiT3hvnNeCDIgPzGRpaNnn5JO27vLFsbGtDqjkioblDRRP7VwVks:u/XvRapn0CDIgrGRYNn7vpsatrNP7KVp

Score

1^/10

Malware Config

Signatures

Files

22bb674ee9614e836f57938022306ecc
.exe windows:4 windows x86 arch:x86

Code Sign

33:00:00:01:1e:12:f4:41:8e:29:47:36:c6:00:00:00:00:01:1e
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/10/2018, 21:07

Not After

10/01/2020, 21:07

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:20

Not After

02/05/2020, 21:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:04:35:45:00:00:00:00:00:3f
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

20/09/2018, 17:42

Not After

09/05/2021, 23:28

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:60:61:95:80:a6:3c:cd:61:b5:de:78:24:7d:ff:e5:20:2d:ca:3e:6d:6e:bc:0f:9a:79:3c:0d:b6:1a:81:88
Signer

Actual PE Digest

fd:60:61:95:80:a6:3c:cd:61:b5:de:78:24:7d:ff:e5:20:2d:ca:3e:6d:6e:bc:0f:9a:79:3c:0d:b6:1a:81:88

Digest Algorithm

sha256

PE Digest Matches

false

1e:fd:08:8a:b0:1c:8d:ad:8d:a7:85:46:3e:ab:3f:4c:db:94:7e:22
Signer

Actual PE Digest

1e:fd:08:8a:b0:1c:8d:ad:8d:a7:85:46:3e:ab:3f:4c:db:94:7e:22

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 44KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 174KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 917KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:1e:12:f4:41:8e:29:47:36:c6:00:00:00:00:01:1eCertificate

Extended Key Usages

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3Certificate

Extended Key Usages

61:04:35:45:00:00:00:00:00:3fCertificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fd:60:61:95:80:a6:3c:cd:61:b5:de:78:24:7d:ff:e5:20:2d:ca:3e:6d:6e:bc:0f:9a:79:3c:0d:b6:1a:81:88Signer

1e:fd:08:8a:b0:1c:8d:ad:8d:a7:85:46:3e:ab:3f:4c:db:94:7e:22Signer

Headers

DLL Characteristics

File Characteristics

Sections

Size: 44KB - Virtual size: 104KB

Size: - Virtual size: 8KB

Size: 512B - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 8KB

Size: 174KB - Virtual size: 2.6MB

.data Size: 917KB - Virtual size: 920KB

33:00:00:01:1e:12:f4:41:8e:29:47:36:c6:00:00:00:00:01:1e
Certificate

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3
Certificate

61:04:35:45:00:00:00:00:00:3f
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fd:60:61:95:80:a6:3c:cd:61:b5:de:78:24:7d:ff:e5:20:2d:ca:3e:6d:6e:bc:0f:9a:79:3c:0d:b6:1a:81:88
Signer

1e:fd:08:8a:b0:1c:8d:ad:8d:a7:85:46:3e:ab:3f:4c:db:94:7e:22
Signer

.rsrc
Size: 2KB - Virtual size: 8KB

.data
Size: 917KB - Virtual size: 920KB