66c2dce11697de6576c7cd19c20b5a7b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

66c2dce11697de6576c7cd19c20b5a7b.bin
Size

550KB
MD5

66c2dce11697de6576c7cd19c20b5a7b
SHA1

0863ae61a3a2a5e2c9cd353233479b7158ca7545
SHA256

c496c51644857e74a6fe1a1c32f85a1622945d1412623fabe3c54c9f832b7c0a
SHA512

1ce3039e272eb3d20187c9d3cf3f92fb4e44f53fd6431588568239b26b6b6b9a161063f2553ca7d3bfe1659f32edf368cba377fea55a82908d44a46a8d8dbbd5
SSDEEP

6144:RtBKGQe36MAl6w1rFwTJt4jvSxxzeN4qdeNAuOrrKvcjOJ9THlpBLqqOPcRhR:RvXWw/eNoNkDaHlpxR

Score

1^/10

Malware Config

Signatures

Files

66c2dce11697de6576c7cd19c20b5a7b.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:2a:8b:b0:d3:75:2f:8a:6d:8c:2d:2f:00:00:00:2a:8b:b0
Certificate

Issuer

CN=Microsoft Marketplace CA G 021,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/11/2023, 05:49

Not After

01/12/2023, 05:49

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment

61:12:44:a2:00:00:00:00:00:02
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/03/2011, 21:09

Not After

28/03/2031, 21:19

Subject

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:4c:02:7b:d7:f6:79:79:cd:32:00:00:00:00:00:4c
Certificate

Issuer

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2019, 20:45

Not After

18/04/2024, 20:45

Subject

CN=Microsoft Marketplace CA G 021,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=Unknown issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

Extended Key Usages

Key Usages

KeyUsageCertSign

1a:bc:2b:9a:f2:8b:4f:f2:52:13:af:3e:cd:09:60:c2:b6:34:33:65:65:c2:82:c7:0f:19:7d:20:14:1a:0f:28
Signer

Actual PE Digest

1a:bc:2b:9a:f2:8b:4f:f2:52:13:af:3e:cd:09:60:c2:b6:34:33:65:65:c2:82:c7:0f:19:7d:20:14:1a:0f:28

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 461KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:2a:8b:b0:d3:75:2f:8a:6d:8c:2d:2f:00:00:00:2a:8b:b0Certificate

Extended Key Usages

Key Usages

61:12:44:a2:00:00:00:00:00:02Certificate

Key Usages

33:00:00:00:4c:02:7b:d7:f6:79:79:cd:32:00:00:00:00:00:4cCertificate

Key Usages

01Certificate

Extended Key Usages

Key Usages

1a:bc:2b:9a:f2:8b:4f:f2:52:13:af:3e:cd:09:60:c2:b6:34:33:65:65:c2:82:c7:0f:19:7d:20:14:1a:0f:28Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 461KB - Virtual size: 461KB

.rsrc Size: 60KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 12B

33:00:2a:8b:b0:d3:75:2f:8a:6d:8c:2d:2f:00:00:00:2a:8b:b0
Certificate

61:12:44:a2:00:00:00:00:00:02
Certificate

33:00:00:00:4c:02:7b:d7:f6:79:79:cd:32:00:00:00:00:00:4c
Certificate

01
Certificate

1a:bc:2b:9a:f2:8b:4f:f2:52:13:af:3e:cd:09:60:c2:b6:34:33:65:65:c2:82:c7:0f:19:7d:20:14:1a:0f:28
Signer

.text
Size: 461KB - Virtual size: 461KB

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 12B