21ccf19519ab636498226a6629a3e202

Sharing

Copy URL Twitter E-mail

General

Target

21ccf19519ab636498226a6629a3e202
Size

521KB
MD5

21ccf19519ab636498226a6629a3e202
SHA1

2246cf0acf41721fdf7982ff98a8c13854eb0620
SHA256

6e53c4709025298f0401f4c5efd82b74f50b0e761d939e237b9b2e73d26b01b4
SHA512

724d4b139543f699bbc55f6b3f8f4eb06a722d9b8f5825fe0d711279c5bccbd75bde0f710249c5ad221510bbd5d2271b3a1e63bc4aa8a9596c3d7b15237d9aab
SSDEEP

12288:u9FX7KaScJ5KvIkzUlGsMtc+Ni1601DOvS0gC9ZXq:QWOWIkz+xeunpE1ra

Score

1^/10

Malware Config

Signatures

Files

21ccf19519ab636498226a6629a3e202
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:49:8c:2b:ab:d8:49:64:7e:d6:8a:55:c8:cc:aa:82:34:77:c9:04:5f:23:de:a2:61:a8:04:03:22:c3:e7:6b
Signer

Actual PE Digest

4f:49:8c:2b:ab:d8:49:64:7e:d6:8a:55:c8:cc:aa:82:34:77:c9:04:5f:23:de:a2:61:a8:04:03:22:c3:e7:6b

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

4f:49:8c:2b:ab:d8:49:64:7e:d6:8a:55:c8:cc:aa:82:34:77:c9:04:5f:23:de:a2:61:a8:04:03:22:c3:e7:6bSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 487KB - Virtual size: 486KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

4f:49:8c:2b:ab:d8:49:64:7e:d6:8a:55:c8:cc:aa:82:34:77:c9:04:5f:23:de:a2:61:a8:04:03:22:c3:e7:6b
Signer

.text
Size: 487KB - Virtual size: 486KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 512B - Virtual size: 12B