ablebits-ultimate-suite-excel-v2024-1-3443-1616[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ablebits-ultimate-suite-excel-v2024-1-3443-1616.exe
Size

27.3MB
MD5

a75d2f0fe047d2d71b629a9054216fd3
SHA1

2c2d915f9a6065c3b5219e6b5bb38afee9895b9c
SHA256

40cbb6d2ed2f6195dfeda3442531854d56707554d07f9f6157c45951c102b06c
SHA512

557ed76e12f5b2f1df26e824572e94dfeb41bf20f22c3eeedd1a9c2f0ba296ae5694fb176409bd491c703c03170a3a2711303625abe9579d85e99e6bbd38ee26
SSDEEP

786432:RXB3PC1p25zZGFdclOnN0TgaEj+p3STLt/1yHtulp:PPs2lZGsE+p+d12uj

Score

1^/10

Malware Config

Signatures

Files

ablebits-ultimate-suite-excel-v2024-1-3443-1616.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:ac:eb:2c:96:22:3b:38:ec:08:98:63:55:90:4e:8c
Certificate

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

26/06/2023, 10:17

Not After

25/06/2026, 10:17

Subject

SERIALNUMBER=0000903861,CN=Office Data Apps Sp. z o.o.,O=Office Data Apps Sp. z o.o.,POSTALCODE=05-092,STREET=ul. Warszawska 109/5,L=Łomianki,ST=mazowieckie,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#1308576172737a617761,1.3.6.1.4.1.311.60.2.1.2=#130b6d617a6f776965636b6965,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:14:cb:ef:fe:0b:dc:49:d1:44:04:6e:8f:7e:3d:16:9e:a2:06:58:65:d1:e2:38:1d:99:ae:8d:ac:c5:ba:6c
Signer

Actual PE Digest

c8:14:cb:ef:fe:0b:dc:49:d1:44:04:6e:8f:7e:3d:16:9e:a2:06:58:65:d1:e2:38:1d:99:ae:8d:ac:c5:ba:6c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26.9MB - Virtual size: 26.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89Certificate

Extended Key Usages

Key Usages

17:ac:eb:2c:96:22:3b:38:ec:08:98:63:55:90:4e:8cCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

c8:14:cb:ef:fe:0b:dc:49:d1:44:04:6e:8f:7e:3d:16:9e:a2:06:58:65:d1:e2:38:1d:99:ae:8d:ac:c5:ba:6cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 26.9MB - Virtual size: 26.9MB

.rsrc Size: 447KB - Virtual size: 447KB

.reloc Size: 512B - Virtual size: 12B

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

17:ac:eb:2c:96:22:3b:38:ec:08:98:63:55:90:4e:8c
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

c8:14:cb:ef:fe:0b:dc:49:d1:44:04:6e:8f:7e:3d:16:9e:a2:06:58:65:d1:e2:38:1d:99:ae:8d:ac:c5:ba:6c
Signer

.text
Size: 26.9MB - Virtual size: 26.9MB

.rsrc
Size: 447KB - Virtual size: 447KB

.reloc
Size: 512B - Virtual size: 12B