file | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

1.5MB
MD5

16c5332ffa5a8fbb4403570ef5de191d
SHA1

ff3cc06fe9bae1927f6aa2d215fbae569249294a
SHA256

47def5090a7fdfdb8fc6cf6569aeaa7ead05443355750b8b579b8c0158367f9e
SHA512

395a82768890e37d5aca509fe85cebcb7054436b95a81903ff8ed1cdc3ad28062220d5679d45c3e6e4a13c0d57e4cd6a322f51877688093dccbd8fc67dc4fad7
SSDEEP

24576:HvDyK4nrFuXSrTb/bqQlt/GR4lHKg6QsiK8XMOf62+xt/Rye:PuKYFuXkcssiKp2U/ge

Score

1^/10

Malware Config

Signatures

Files

file
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:22:d4:7c:f4:35:ae:de:8b:6e:ca:45:c4:fc:56:02:00:dc:9d:61:b7:76:03:bd:84:2b:ed:e2:aa:29:71:a4
Signer

Actual PE Digest

a0:22:d4:7c:f4:35:ae:de:8b:6e:ca:45:c4:fc:56:02:00:dc:9d:61:b7:76:03:bd:84:2b:ed:e2:aa:29:71:a4

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

a0:22:d4:7c:f4:35:ae:de:8b:6e:ca:45:c4:fc:56:02:00:dc:9d:61:b7:76:03:bd:84:2b:ed:e2:aa:29:71:a4Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

a0:22:d4:7c:f4:35:ae:de:8b:6e:ca:45:c4:fc:56:02:00:dc:9d:61:b7:76:03:bd:84:2b:ed:e2:aa:29:71:a4
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B