vmconnect6[.]2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

vmconnect6.2.exe
Size

356KB
MD5

d919ba7116fdf60c100c02caee70b74c
SHA1

bdc031e750fdc5623b671195484783a4b22d6b03
SHA256

35a86f77fe2afc753a6ed72a51bd80753b8787075ee716d7594371d3764f5246
SHA512

b999016ebca8c531e54575dc1d0dd8405048f41c5e0b5ca62c5b32f2b36a3152e72b94f093a09b8f23f639b6ed2bd3fb30c13ea2ca13c2b2dd14542f7fff8cf1
SSDEEP

6144:+P7Z8bLmfqVGiePDFjGVp6terxFYtE0r0Y5:7kxvTh

Score

1^/10

Malware Config

Signatures

Files

vmconnect6.2.exe
.exe windows:4 windows x64 arch:x64

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:24

Not After

02-05-2020 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:ee:b9:dd:cf:9e:ac:8d:c8:c4:2c:56:bd:56:5b:db:c1:20:72:d4:df:b9:a9:6a:44:4a:1e:e9:d0:64:0e:38
Signer

Actual PE Digest

f3:ee:b9:dd:cf:9e:ac:8d:c8:c4:2c:56:bd:56:5b:db:c1:20:72:d4:df:b9:a9:6a:44:4a:1e:e9:d0:64:0e:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

vmconnect6.2.pdb

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

f3:ee:b9:dd:cf:9e:ac:8d:c8:c4:2c:56:bd:56:5b:db:c1:20:72:d4:df:b9:a9:6a:44:4a:1e:e9:d0:64:0e:38Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 329KB - Virtual size: 328KB

.rsrc Size: 18KB - Virtual size: 17KB

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

f3:ee:b9:dd:cf:9e:ac:8d:c8:c4:2c:56:bd:56:5b:db:c1:20:72:d4:df:b9:a9:6a:44:4a:1e:e9:d0:64:0e:38
Signer

.text
Size: 329KB - Virtual size: 328KB

.rsrc
Size: 18KB - Virtual size: 17KB