4ddc4caa0d9fff6e4100fe8db22d7f80

Sharing

Copy URL Twitter E-mail

General

Target

4ddc4caa0d9fff6e4100fe8db22d7f80
Size

2.4MB
MD5

4ddc4caa0d9fff6e4100fe8db22d7f80
SHA1

5a7c2e292a6b6945247b69bc1eb5a821873a1bed
SHA256

62bda7e7beefcd79c5c58b383db79389ddf85a4d3e21cfb4a321c9460d8db7c5
SHA512

da4f3a13de2608ef37af62f18bb165796764441bcb40e5e2351d1fb1bd93b730be286a568c43ad288597dcc1dafd9b57009205ad40b09dc51615bc2feacb50d5
SSDEEP

24576:/hbaEPiQpDad5ftYxFsxTv4+dueNTRvn4DPsbqio9us17cf6Usv2JkkedScGNgkj:fpkBONq4D0OioIsF8TJzBc8St+

Score

1^/10

Malware Config

Signatures

Files

4ddc4caa0d9fff6e4100fe8db22d7f80
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Code Sign

54:08:3a:34:9e:71:8b:92:4c:d9:dc:da:09:13:20:e5
Certificate

Issuer

CN=Microsoft Windows

Not Before

19/05/2021, 18:24

Not After

31/12/2039, 23:59

Subject

CN=Microsoft Windows

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:6b:96:bb:31:f8:c0:bf:17:b9:d0:c8:0c:68:e5:51:b6:f6:22:e6
Signer

Actual PE Digest

e8:6b:96:bb:31:f8:c0:bf:17:b9:d0:c8:0c:68:e5:51:b6:f6:22:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lgtztqkx
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ewndlkrh
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

54:08:3a:34:9e:71:8b:92:4c:d9:dc:da:09:13:20:e5Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

e8:6b:96:bb:31:f8:c0:bf:17:b9:d0:c8:0c:68:e5:51:b6:f6:22:e6Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 488KB - Virtual size: 488KB

.rsrc Size: 44KB - Virtual size: 44KB

.idata Size: 512B - Virtual size: 8KB

lgtztqkx Size: 1.9MB - Virtual size: 1.9MB

ewndlkrh Size: 512B - Virtual size: 8KB

54:08:3a:34:9e:71:8b:92:4c:d9:dc:da:09:13:20:e5
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e8:6b:96:bb:31:f8:c0:bf:17:b9:d0:c8:0c:68:e5:51:b6:f6:22:e6
Signer

.rsrc
Size: 44KB - Virtual size: 44KB

.idata
Size: 512B - Virtual size: 8KB

lgtztqkx
Size: 1.9MB - Virtual size: 1.9MB

ewndlkrh
Size: 512B - Virtual size: 8KB