G[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

G.exe
Size

32KB
MD5

6ca6141ef5305431cd1e36033b5ea4f0
SHA1

5c624c8685e633deab7f663483863fbb06e5b345
SHA256

163d39cd5e2e3cd73690e1625854fea824542c1989fa9430acca4c5a6f32a6b8
SHA512

54094933955673932bc133076ae9d74db2f1dc12bf81a565ebb8944d6089324b078b741b0d855f4e8df7bb98d6dce6847a4e548047ff3996637cf1f8bddc475d
SSDEEP

768:dKv3zJBB9OvIPFH+DqEA+DqE1mYcV6GZizhqmEnPtunSiTZKde:d8J1OvIPQDbDle6GizEmE1uRKg

Score

1^/10

Malware Config

Signatures

Files

G.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7a:fd:bd:56:30:0f:05:6e:cc:b5:7a:91:2b:bc:04:fb
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10/08/2023, 18:18

Not After

09/08/2024, 18:18

Subject

CN=Videra Services Ltd,O=Videra Services Ltd,L=Belper,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:f1:09:cc:6b:83:c1:99:47:6d:2d:06:21:93:1c:bf:78:c6:ca:d6:8c:15:72:09:2f:94:62:83:67:62:78:d5
Signer

Actual PE Digest

bf:f1:09:cc:6b:83:c1:99:47:6d:2d:06:21:93:1c:bf:78:c6:ca:d6:8c:15:72:09:2f:94:62:83:67:62:78:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\1\Downloads\GoogleUp\Gооglе Uрdаtе\obj\Debug\Gооglе Uрdаtе.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7a:fd:bd:56:30:0f:05:6e:cc:b5:7a:91:2b:bc:04:fbCertificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

bf:f1:09:cc:6b:83:c1:99:47:6d:2d:06:21:93:1c:bf:78:c6:ca:d6:8c:15:72:09:2f:94:62:83:67:62:78:d5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 12KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 12B

7a:fd:bd:56:30:0f:05:6e:cc:b5:7a:91:2b:bc:04:fb
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

bf:f1:09:cc:6b:83:c1:99:47:6d:2d:06:21:93:1c:bf:78:c6:ca:d6:8c:15:72:09:2f:94:62:83:67:62:78:d5
Signer

.text
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 12B