0f42ad066053b563009c215efcc5a67696251590aae0b0783c46a836d93364a3

Sharing

Copy URL Twitter E-mail

General

Target

0f42ad066053b563009c215efcc5a67696251590aae0b0783c46a836d93364a3
Size

4.6MB
MD5

bc94ff224dfd3f525fff7858b547d9fa
SHA1

515e7c65da96d9d2a8f46145aad72bbb56fb3225
SHA256

0f42ad066053b563009c215efcc5a67696251590aae0b0783c46a836d93364a3
SHA512

b708dbb50c0b8f558ec8a5d2b69ebe71838505a5940bb45646d89cdd35927d6cdefe921bd99a26221032f4f74132551ffe0e3ca01fd44b6f96b30f63048f37ef
SSDEEP

98304:JgiVBTrMsKMsviLgY7ryhJcphFRVNIvynYr41Q3PrWLMFK/F4CQw2uiDS:JrgYPyhJsFRfIqnYOQ3P6gFK/F4CQw2Y

Score

1^/10

Malware Config

Signatures

Files

0f42ad066053b563009c215efcc5a67696251590aae0b0783c46a836d93364a3
.exe windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:7b:13:67:1e:3a:d8:d6:e3:cf:72:65:56:c6:56:2e:59:c9:a5:8d:a6:23:25:f4:e4:e6:e7:13:a7:4d:89:7f
Signer

Actual PE Digest

6c:7b:13:67:1e:3a:d8:d6:e3:cf:72:65:56:c6:56:2e:59:c9:a5:8d:a6:23:25:f4:e4:e6:e7:13:a7:4d:89:7f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 340KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 69KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.winlice
Size: - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

6c:7b:13:67:1e:3a:d8:d6:e3:cf:72:65:56:c6:56:2e:59:c9:a5:8d:a6:23:25:f4:e4:e6:e7:13:a7:4d:89:7fSigner

Headers

DLL Characteristics

File Characteristics

Sections

Size: 340KB - Virtual size: 1.6MB

Size: 69KB - Virtual size: 339KB

Size: 1KB - Virtual size: 23KB

Size: 41KB - Virtual size: 74KB

Size: 512B - Virtual size: 7KB

Size: 512B - Virtual size: 359B

Size: 512B - Virtual size: 337B

Size: 512B - Virtual size: 546B

.rsrc Size: 51KB - Virtual size: 51KB

Size: 2KB - Virtual size: 10KB

.idata Size: 512B - Virtual size: 4KB

.winlice Size: - Virtual size: 7.0MB

.boot Size: 4.1MB - Virtual size: 4.1MB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

6c:7b:13:67:1e:3a:d8:d6:e3:cf:72:65:56:c6:56:2e:59:c9:a5:8d:a6:23:25:f4:e4:e6:e7:13:a7:4d:89:7f
Signer

.rsrc
Size: 51KB - Virtual size: 51KB

.idata
Size: 512B - Virtual size: 4KB

.winlice
Size: - Virtual size: 7.0MB

.boot
Size: 4.1MB - Virtual size: 4.1MB