4dc16425fb9a74eb3e0fbbe62c2b0d32

Sharing

Copy URL Twitter E-mail

General

Target

4dc16425fb9a74eb3e0fbbe62c2b0d32
Size

534KB
MD5

4dc16425fb9a74eb3e0fbbe62c2b0d32
SHA1

e7b02b77cdacee60a1c6156cb9dbce7b34a0ad65
SHA256

6f83e33e1f221daa9466451912c0d5f8186f601b1d595881530ec333724f9c0b
SHA512

6c5b52e24d8f14e2fec31884486f63d870c548634da963de99186d666357748d7950c3ca5d06f52505935ed34cd0cb3da2ea3c326be7be76bb5cab36bf10dec5
SSDEEP

12288:BlQzLbUJIFRti3AirWuzfaeaDgoUj2kRBWQ:BTrAaW+fkDgoUj3RBv

Score

1^/10

Malware Config

Signatures

Files

4dc16425fb9a74eb3e0fbbe62c2b0d32
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:19:8c:0a:9f:b2:16:2b:10:e6:00:00:00:00:02:19
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/04/2021, 19:12

Not After

28/04/2022, 19:12

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:42:c1:fa:d4:33:34:5d:d2:cd:ca:80:a6:93:84:2c:9c:56:7f:dc:26:f4:60:42:ea:f7:90:cb:94:2b:fc:0b
Signer

Actual PE Digest

72:42:c1:fa:d4:33:34:5d:d2:cd:ca:80:a6:93:84:2c:9c:56:7f:dc:26:f4:60:42:ea:f7:90:cb:94:2b:fc:0b

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:19:8c:0a:9f:b2:16:2b:10:e6:00:00:00:00:02:19Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

72:42:c1:fa:d4:33:34:5d:d2:cd:ca:80:a6:93:84:2c:9c:56:7f:dc:26:f4:60:42:ea:f7:90:cb:94:2b:fc:0bSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 317KB - Virtual size: 317KB

.rsrc Size: 207KB - Virtual size: 206KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:19:8c:0a:9f:b2:16:2b:10:e6:00:00:00:00:02:19
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

72:42:c1:fa:d4:33:34:5d:d2:cd:ca:80:a6:93:84:2c:9c:56:7f:dc:26:f4:60:42:ea:f7:90:cb:94:2b:fc:0b
Signer

.text
Size: 317KB - Virtual size: 317KB

.rsrc
Size: 207KB - Virtual size: 206KB

.reloc
Size: 512B - Virtual size: 12B