6de6ae7b51d7e7644c988406829b0331[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

6de6ae7b51d7e7644c988406829b0331.exe
Size

5.6MB
MD5

6de6ae7b51d7e7644c988406829b0331
SHA1

a970b37799da109ff1d492df81c4b64fc6c0e595
SHA256

1140e139bbdfd915c3d86eadcd65aa8d643e4a0aa0cd5d9e536b1b8c528ae4e6
SHA512

5f54fdb3d664478b4bd0a86460a5538cf3f2c6277eb42f567859f6144092e63292e8a691df55608c9f5ccf8fa0d6f3b34e386dce5e41e80b5d2ef1cd918a17c3
SSDEEP

98304:cj0ivwXuhNqQZBlnOAiu5lbntsjZVrV3JCeeAmWAVF3fj1JaTIkn81eVAxbSmo0W:XiVhBb1lL5d6j/rFFeZxFL1JaMkn8pSf

Score

1^/10

Malware Config

Signatures

Files

6de6ae7b51d7e7644c988406829b0331.exe
.exe windows:6 windows x64 arch:x64

Code Sign

79:46:b9:55:69:da:46:c3:bd:8d:1c:52:f5:02:aa:c1
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-02-2024 03:18

Not After

23-02-2025 03:18

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f0:a3:ce:68:20:21:d0:f7:d7:b8:10:ac:74:81:83:74:54:a7:b9:31:9d:1a:0b:33:7e:18:a9:7e:4a:63:84:be
Signer

Actual PE Digest

f0:a3:ce:68:20:21:d0:f7:d7:b8:10:ac:74:81:83:74:54:a7:b9:31:9d:1a:0b:33:7e:18:a9:7e:4a:63:84:be

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

DotNetRuntimeDebugHeader

Sections

Size: 198KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 571KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 674KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 42KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 72KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 192B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 507B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

."�6{g=
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

79:46:b9:55:69:da:46:c3:bd:8d:1c:52:f5:02:aa:c1Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

f0:a3:ce:68:20:21:d0:f7:d7:b8:10:ac:74:81:83:74:54:a7:b9:31:9d:1a:0b:33:7e:18:a9:7e:4a:63:84:beSigner

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 198KB - Virtual size: 459KB

Size: 571KB - Virtual size: 1.7MB

Size: 674KB - Virtual size: 1.3MB

Size: 42KB - Virtual size: 203KB

Size: 72KB - Virtual size: 123KB

Size: 192B - Virtual size: 348B

Size: 507B - Virtual size: 968B

Size: 11KB - Virtual size: 39KB

.exports Size: 512B - Virtual size: 4KB

.imports Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

."�6{g= Size: - Virtual size: 5.7MB

.boot Size: 4.1MB - Virtual size: 4.1MB

.reloc Size: 16B - Virtual size: 4KB

79:46:b9:55:69:da:46:c3:bd:8d:1c:52:f5:02:aa:c1
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

f0:a3:ce:68:20:21:d0:f7:d7:b8:10:ac:74:81:83:74:54:a7:b9:31:9d:1a:0b:33:7e:18:a9:7e:4a:63:84:be
Signer

.exports
Size: 512B - Virtual size: 4KB

.imports
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

."�6{g=
Size: - Virtual size: 5.7MB

.boot
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 16B - Virtual size: 4KB