61882c888ad10f39e5ecc5eb67eaa57a[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

61882c888ad10f39e5ecc5eb67eaa57a.bin
Size

14.5MB
MD5

61882c888ad10f39e5ecc5eb67eaa57a
SHA1

1878075b47aa54a286e3bd97c8d024d15fbbb36b
SHA256

f3785984b2cd7dd1beb1a2cd126163cd70a0ea3c10f328aa4fea50d2f6c4a22d
SHA512

320e7be9fcb6f9de0715cb07b7ef574db37f1ebdcc9f374bd08efcd6b1e19d1f984abdbfa98e6801226935f928cc15716aa38bfc1fd7d9c3bc53ac639800ad88
SSDEEP

196608:ODyzMu8RHG2c3eiBzjcWjj6r1AKuV/K3//ry9dxlC3dSVnQ5HVGlDljL9+W3ZD8+:CgMdmLeeudl29dlnnpfMW3ZD8j1Y1RW

Score

1^/10

Malware Config

Signatures

Files

61882c888ad10f39e5ecc5eb67eaa57a.bin
.exe windows:5 windows x86 arch:x86

Code Sign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/01/2020, 00:00

Not After

11/04/2023, 23:59

Subject

CN=DotFix Software,O=DotFix Software,POSTALCODE=300045,STREET=7 Nekrasova ul.,L=Tula,ST=Tulskaya obl.,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/01/2020, 00:00

Not After

11/04/2023, 23:59

Subject

CN=DotFix Software,O=DotFix Software,POSTALCODE=300045,STREET=7 Nekrasova ul.,L=Tula,ST=Tulskaya obl.,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:fa:e5:d9:19:25:83:5a:16:bb:cb:87:13:46:73:cd:67:75:bf:2b:3a:07:8d:51:fa:d7:11:90:39:79:53:55
Signer

Actual PE Digest

4c:fa:e5:d9:19:25:83:5a:16:bb:cb:87:13:46:73:cd:67:75:bf:2b:3a:07:8d:51:fa:d7:11:90:39:79:53:55

Digest Algorithm

sha256

PE Digest Matches

false

c9:ae:92:cb:b0:30:37:c2:6c:dd:1a:d3:48:03:00:f0:0e:54:85:e7
Signer

Actual PE Digest

c9:ae:92:cb:b0:30:37:c2:6c:dd:1a:d3:48:03:00:f0:0e:54:85:e7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TMethodImplementationIntercept
dbkFCallWrapperAddr
madTraceProcess

Sections

Size: 1.8MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 48KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 5.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 245KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.4MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 38.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

4c:fa:e5:d9:19:25:83:5a:16:bb:cb:87:13:46:73:cd:67:75:bf:2b:3a:07:8d:51:fa:d7:11:90:39:79:53:55Signer

c9:ae:92:cb:b0:30:37:c2:6c:dd:1a:d3:48:03:00:f0:0e:54:85:e7Signer

Headers

File Characteristics

Exports

Exports

Sections

Size: 1.8MB - Virtual size: 5.2MB

Size: 7KB - Virtual size: 16KB

Size: 48KB - Virtual size: 152KB

Size: - Virtual size: 5.4MB

Size: 512B - Virtual size: 24KB

Size: 1024B - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 245KB - Virtual size: 428KB

Size: 1.4MB - Virtual size: 3.8MB

.rsrc Size: 169KB - Virtual size: 172KB

Size: 2KB - Virtual size: 38.0MB

.data Size: 10.9MB - Virtual size: 10.9MB

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8b:cf:80:09:ff:c1:34:95:90:15:29:51:34:b8:14:e8
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

4c:fa:e5:d9:19:25:83:5a:16:bb:cb:87:13:46:73:cd:67:75:bf:2b:3a:07:8d:51:fa:d7:11:90:39:79:53:55
Signer

c9:ae:92:cb:b0:30:37:c2:6c:dd:1a:d3:48:03:00:f0:0e:54:85:e7
Signer

.rsrc
Size: 169KB - Virtual size: 172KB

.data
Size: 10.9MB - Virtual size: 10.9MB