pivot_v4-2[.]exe

Resubmissions

21-04-2024 04:55

240421-fklzqacb2s 8

27-02-2024 19:38

240227-yctzgahf54 8

Sharing

Copy URL

Twitter E-mail

General

Target

pivot_v4-2.exe
Size

616KB
MD5

d3eefd47c4e9914b0628ce70eb8bc2d4
SHA1

e62be539433ebab0c86bd6838503fb7a8fed81a5
SHA256

032185876f05ee92ea39feddce819321acb8c4600b5d580396a7e5e29fbc82de
SHA512

5e6be0e425f38958b3a34a9e30ac41c68a90cb50b3f6a331e18864dbcd96c847f8455644d2cb22bb8eae662d35855ce1733093b3dae7cfd26c1a7cc83d7be4ce
SSDEEP

12288:1otU8AmKff8NWuJQnvv5Ehl3qRlWUFxuUN:1L8Am4f8NWuJQnH5Ehl3qlQUN

Score

1^/10

Malware Config

Signatures

Files

pivot_v4-2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

71:4b:cf:54:35:dc:1a:ba:a9:c7:c5:b7:1b:ca:4f:26
Certificate

Issuer

CN=Domain The Net Technologies Ltd CA for Code Signing R2,O=Domain The Net Technologies Ltd,C=IL

Not Before

27-12-2022 07:45

Not After

26-12-2023 07:45

Subject

CN=Motus Software Ltd,O=Motus Software Ltd,L=Holmes Hill,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6f
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26-03-2019 17:33

Not After

22-03-2034 17:33

Subject

CN=SSL.com Code Signing Enterprise Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:be
Certificate

Issuer

CN=SSL.com Code Signing Enterprise Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

01-04-2019 17:10

Not After

30-03-2024 17:10

Subject

CN=Domain The Net Technologies Ltd CA for Code Signing R2,O=Domain The Net Technologies Ltd,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:8a:f6:2c:98:6e:1e:ed:cc:aa:ec:e0:66:9d:9b:bb:53:dd:99:2f:ce:3e:70:7a:20:95:82:f8:18:28:c0:cb
Signer

Actual PE Digest

0d:8a:f6:2c:98:6e:1e:ed:cc:aa:ec:e0:66:9d:9b:bb:53:dd:99:2f:ce:3e:70:7a:20:95:82:f8:18:28:c0:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

71:4b:cf:54:35:dc:1a:ba:a9:c7:c5:b7:1b:ca:4f:26Certificate

Extended Key Usages

Key Usages

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6fCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:beCertificate

Extended Key Usages

Key Usages

0d:8a:f6:2c:98:6e:1e:ed:cc:aa:ec:e0:66:9d:9b:bb:53:dd:99:2f:ce:3e:70:7a:20:95:82:f8:18:28:c0:cbSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 545KB - Virtual size: 545KB

.rsrc Size: 60KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 12B

71:4b:cf:54:35:dc:1a:ba:a9:c7:c5:b7:1b:ca:4f:26
Certificate

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6f
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:be
Certificate

0d:8a:f6:2c:98:6e:1e:ed:cc:aa:ec:e0:66:9d:9b:bb:53:dd:99:2f:ce:3e:70:7a:20:95:82:f8:18:28:c0:cb
Signer

.text
Size: 545KB - Virtual size: 545KB

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 12B