6ec22113ab1ea3ca76af39018eb1f7ec

Sharing

Copy URL Twitter E-mail

General

Target

6ec22113ab1ea3ca76af39018eb1f7ec
Size

1.7MB
MD5

6ec22113ab1ea3ca76af39018eb1f7ec
SHA1

254210b4906a29778d263640715f39878d7c8abc
SHA256

05fbbef07f847b4a1d58463e1adc12b7af4cb653ca438fb6e6c7531b43764d94
SHA512

005e75f6f3ed42c1c5235255cda0578f7f2d3e539ee6b2433da4068fb8a4e56f99a457147b29e32f19077f8f51322e4ee6f93a26da0938cb2add52d1663ec47c
SSDEEP

49152:gI4M0EbZi6v3piJsA+6ZIDhl9lP640ZLgfEHM:gI4M0EIC3piJsAujy40drH

Score

1^/10

Malware Config

Signatures

Files

6ec22113ab1ea3ca76af39018eb1f7ec
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Code Sign

0f:5a:57:72:69:99:50:6b:6f:93:fd:9a:15:0b:88:fa
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2015, 00:00

Not After

14/11/2018, 12:00

Subject

CN=BattlEye Innovations e.K.,O=BattlEye Innovations e.K.,L=Tübingen,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:48:05:db:55:32:7a:89:5a:d0:ed:ea:69:f5:74:19:0c:b0:d0:d1
Signer

Actual PE Digest

a3:48:05:db:55:32:7a:89:5a:d0:ed:ea:69:f5:74:19:0c:b0:d0:d1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

otwppenh
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cnpbzqvx
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

0f:5a:57:72:69:99:50:6b:6f:93:fd:9a:15:0b:88:faCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

a3:48:05:db:55:32:7a:89:5a:d0:ed:ea:69:f5:74:19:0c:b0:d0:d1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 12KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 8KB

Size: 512B - Virtual size: 2.7MB

otwppenh Size: 1.7MB - Virtual size: 1.7MB

cnpbzqvx Size: 512B - Virtual size: 8KB

.taggant Size: 8KB - Virtual size: 16KB

0f:5a:57:72:69:99:50:6b:6f:93:fd:9a:15:0b:88:fa
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

a3:48:05:db:55:32:7a:89:5a:d0:ed:ea:69:f5:74:19:0c:b0:d0:d1
Signer

.rsrc
Size: 4KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 8KB

otwppenh
Size: 1.7MB - Virtual size: 1.7MB

cnpbzqvx
Size: 512B - Virtual size: 8KB

.taggant
Size: 8KB - Virtual size: 16KB