b50b897c415616ea5e6ec8d6564e19f1

Sharing

Copy URL Twitter E-mail

General

Target

b50b897c415616ea5e6ec8d6564e19f1
Size

6.8MB
MD5

b50b897c415616ea5e6ec8d6564e19f1
SHA1

1bdff8af514f7005fd39118e6c785c4929b728fa
SHA256

e047a9921c86c016d3155d8a0f0c7e3ec768ad7a5240b4a61d54a912a47abdc1
SHA512

3f9d08829af89bd3c46bba5c2b229e97b61675348874bf234e2587724d4ef94f1c25ddf4e9fc1b250da241e63852d29f2d4c4f670943ec7c9a361a02b292028a
SSDEEP

196608:7WSLebArOISul8Ffavlae9/8LYI5KsCuuQr8g0r/:7JLeM6ISvFfavww2YOxr8vr/

Score

1^/10

Malware Config

Signatures

Files

b50b897c415616ea5e6ec8d6564e19f1
.exe windows:4 windows x64 arch:x64

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:d5:de:6b:13:aa:97:74:42:8d:3f:55:6c:68:8d:9a:5c:e1:a8:4e:2f:ca:87:30:35:07:40:71:b6:7c:2d:72
Signer

Actual PE Digest

f3:d5:de:6b:13:aa:97:74:42:8d:3f:55:6c:68:8d:9a:5c:e1:a8:4e:2f:ca:87:30:35:07:40:71:b6:7c:2d:72

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

f3:d5:de:6b:13:aa:97:74:42:8d:3f:55:6c:68:8d:9a:5c:e1:a8:4e:2f:ca:87:30:35:07:40:71:b6:7c:2d:72Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 6.7MB - Virtual size: 6.7MB

.rsrc Size: 50KB - Virtual size: 49KB

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

f3:d5:de:6b:13:aa:97:74:42:8d:3f:55:6c:68:8d:9a:5c:e1:a8:4e:2f:ca:87:30:35:07:40:71:b6:7c:2d:72
Signer

.text
Size: 6.7MB - Virtual size: 6.7MB

.rsrc
Size: 50KB - Virtual size: 49KB