3a3395f276b1efc1d86d71cc213cd0c4

Sharing

Copy URL Twitter E-mail

General

Target

3a3395f276b1efc1d86d71cc213cd0c4
Size

520KB
MD5

3a3395f276b1efc1d86d71cc213cd0c4
SHA1

2f25d94f00e9999bbbc2e847cc57f7201488624c
SHA256

a41a07937cfa1f0f129fb75c521bfb958410d879a3450924d28e57c6c6ca3c69
SHA512

181a3383f4d6bdcd29517fab6211c73224bf5e81e81b1bb2619622877ae9eb9ed85878cee40d7566264bffb5bd0bf4c73ec325f20e752a5036c61e21fe723669
SSDEEP

12288:Cv6HVMJz7bLg0EKsWmAhndfnZs8svfozjC:THSeQsWmAhBIvfozjC

Score

1^/10

Malware Config

Signatures

Files

3a3395f276b1efc1d86d71cc213cd0c4
.exe windows:4 windows x86 arch:x86

Code Sign

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:25

Not After

02/05/2020, 21:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:18:7c:13:eb:bf:ad:9c:04:fe:a9:49:96:45:e9:ee:48:c4:b6:dc:1f:ed:55:f5:9d:56:27:31:63:ff:3a:ed
Signer

Actual PE Digest

32:18:7c:13:eb:bf:ad:9c:04:fe:a9:49:96:45:e9:ee:48:c4:b6:dc:1f:ed:55:f5:9d:56:27:31:63:ff:3a:ed

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cfCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

32:18:7c:13:eb:bf:ad:9c:04:fe:a9:49:96:45:e9:ee:48:c4:b6:dc:1f:ed:55:f5:9d:56:27:31:63:ff:3a:edSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 108KB - Virtual size: 108KB

.sdata Size: 512B - Virtual size: 498B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.enigma1 Size: 120KB - Virtual size: 8KB

.enigma2 Size: 280KB - Virtual size: 280KB

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

32:18:7c:13:eb:bf:ad:9c:04:fe:a9:49:96:45:e9:ee:48:c4:b6:dc:1f:ed:55:f5:9d:56:27:31:63:ff:3a:ed
Signer

.text
Size: 108KB - Virtual size: 108KB

.sdata
Size: 512B - Virtual size: 498B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.enigma1
Size: 120KB - Virtual size: 8KB

.enigma2
Size: 280KB - Virtual size: 280KB