ExaltAccountManager[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ExaltAccountManager.exe
Size

14.1MB
MD5

ff509537ca6fbe73d74deb5da7e9481d
SHA1

5621115e78d30e6c5acb7790c5875014d34f4ff2
SHA256

f0d9b3c85a4ed2c15cbd2dd9fdae406b2389de55e1674851c9261a9612fc808c
SHA512

6d1559c8510a4d4f89f3809a168d50b65f88928fc68d6f0c217b5b8435a561149835f2244398868ace32c6e0c599d4b4b004dc6f1cce308ecb5167ae25990a86
SSDEEP

196608:4mZTW/sr3ctpfh5inocXtVhBl1Co0NBCfibAPofEuSjdjaerkSI3Z0NWGt:nZC0r275g3l1CKfmAPluSJjackS8Z0Nt

Score

1^/10

Malware Config

Signatures

Files

ExaltAccountManager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:42:c2:f3:16:60:51:e2:d2:f8:61:20:f4:b3:eb:bf
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

03/03/2023, 09:50

Not After

02/03/2024, 09:50

Subject

CN=Open Source Developer\, Maik Kühne,O=Open Source Developer,ST=Lower Saxony,C=DE,1.2.840.113549.1.9.1=#0c0d6d61696c406d61696b382e6465

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:de:ec:58:89:28:6d:b4:ae:74:63:37:46:1b:29:da:17:58:fc:83:ec:32:43:95:c8:7f:63:86:5d:b2:9b:57
Signer

Actual PE Digest

3a:de:ec:58:89:28:6d:b4:ae:74:63:37:46:1b:29:da:17:58:fc:83:ec:32:43:95:c8:7f:63:86:5d:b2:9b:57

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Maik8\source\repos\ExaltAccountManager\ExaltAccountManager\obj\Release\ExaltAccountManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.7MB - Virtual size: 13.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

06:42:c2:f3:16:60:51:e2:d2:f8:61:20:f4:b3:eb:bfCertificate

Extended Key Usages

Key Usages

3a:de:ec:58:89:28:6d:b4:ae:74:63:37:46:1b:29:da:17:58:fc:83:ec:32:43:95:c8:7f:63:86:5d:b2:9b:57Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 13.7MB - Virtual size: 13.7MB

.rsrc Size: 377KB - Virtual size: 377KB

.reloc Size: 512B - Virtual size: 12B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

06:42:c2:f3:16:60:51:e2:d2:f8:61:20:f4:b3:eb:bf
Certificate

3a:de:ec:58:89:28:6d:b4:ae:74:63:37:46:1b:29:da:17:58:fc:83:ec:32:43:95:c8:7f:63:86:5d:b2:9b:57
Signer

.text
Size: 13.7MB - Virtual size: 13.7MB

.rsrc
Size: 377KB - Virtual size: 377KB

.reloc
Size: 512B - Virtual size: 12B