b6356383c23e6b3d99020705f4465d38[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

b6356383c23e6b3d99020705f4465d38.bin
Size

752KB
MD5

8e7b2c0109cfcb09845f5e5bd3ed7277
SHA1

f2f95daa2be3d917360b30a651adec377a0f0584
SHA256

36ca1cd9562ad16cc8d6ff536c6e0716567617486b8d5c9469990a1368eb350b
SHA512

0daaa4fed703628480951ad074faa41679d101ce4e4b0103cff08fab8078a5cb58692468861a8738f2d0fd82e888b221550cd336a8f0713198a27df99092ac2c
SSDEEP

12288:HBeJ/xDS9YpfAWFnlOYDhcN5aB9psQLhQG50hb8bwKL+0Ywl12ZzFwI9eJ254+X8:HuEG2W7qgyfEwKCLZH9S25pqlj

Score

1^/10

Malware Config

Signatures

Files

b6356383c23e6b3d99020705f4465d38.bin
.zip

Password: infected
6b6aa6f3eafabe7135d78cc7dc61bfbbef60854ee7d64790da42aedcfc996dbb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

71:0f:53:ec:bb:97:c6:12:e0:6a:c7:b2:c4:0f:27:23
Certificate

Issuer

CN=Google Inc,C=CN

Not Before

21/12/2023, 10:38

Not After

21/12/2024, 10:38

Subject

CN=Google Inc,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:33:49:b3:85:49:71:4f:ec:53:ab:12:e1:d5:f6:fd:2d:e3:34:c1:da:bd:ab:16:ca:49:2e:6f:cf:b6:de:0c
Signer

Actual PE Digest

a9:33:49:b3:85:49:71:4f:ec:53:ab:12:e1:d5:f6:fd:2d:e3:34:c1:da:bd:ab:16:ca:49:2e:6f:cf:b6:de:0c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

71:0f:53:ec:bb:97:c6:12:e0:6a:c7:b2:c4:0f:27:23Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

a9:33:49:b3:85:49:71:4f:ec:53:ab:12:e1:d5:f6:fd:2d:e3:34:c1:da:bd:ab:16:ca:49:2e:6f:cf:b6:de:0cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1019KB - Virtual size: 1019KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 12B

71:0f:53:ec:bb:97:c6:12:e0:6a:c7:b2:c4:0f:27:23
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

a9:33:49:b3:85:49:71:4f:ec:53:ab:12:e1:d5:f6:fd:2d:e3:34:c1:da:bd:ab:16:ca:49:2e:6f:cf:b6:de:0c
Signer

.text
Size: 1019KB - Virtual size: 1019KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 12B