24201da166b3e59a7a2b79f24881222c41e35f26642dd757fcc51ec47c9404e4

Sharing

Copy URL Twitter E-mail

General

Target

24201da166b3e59a7a2b79f24881222c41e35f26642dd757fcc51ec47c9404e4
Size

6.7MB
MD5

74cf066c5c492eb825b36550b1e38326
SHA1

8f211213fbd6905b5e44bf2af07e481832198a7f
SHA256

24201da166b3e59a7a2b79f24881222c41e35f26642dd757fcc51ec47c9404e4
SHA512

24ad3ebb70332741959b13be504ec2b3baee9668bb3a8e8ae314432ac2e084ad11c03f4abfba6f7557273cddb1b3d2e2361c71246f3fd7fccabae218dd8b2e91
SSDEEP

196608:lyj34Eyt2JJ85FirZd9t13BrGE7TIOSL1uf0XvrF:oj3K485FirZLrB3AOdfqvrF

Score

1^/10

Malware Config

Signatures

Files

24201da166b3e59a7a2b79f24881222c41e35f26642dd757fcc51ec47c9404e4
.exe windows:6 windows x86 arch:x86

12c5bbbfbf4387c247e4bd802727a5a3

Code Sign

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3
Certificate

Issuer

CN=(C) 1998-2020 Logitech. All rights reserved.

Not Before

07/12/2023, 10:12

Not After

08/12/2033, 10:12

Subject

CN=(C) 1998-2020 Logitech. All rights reserved.

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:58:85:4c:a1:f5:1e:4d:11:6b:a7:bb:67:61:f2:92:3a:4f:cb:b4:bc:57:16:01:5d:f9:ea:1d:77:12:a0:19
Signer

Actual PE Digest

5e:58:85:4c:a1:f5:1e:4d:11:6b:a7:bb:67:61:f2:92:3a:4f:cb:b4:bc:57:16:01:5d:f9:ea:1d:77:12:a0:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

ole32

CoCreateInstance

oleaut32

SysAllocString

gdi32

BitBlt

user32

GetDC

Sections

.text
Size: - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmpã��
Size: - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmpã��
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmpã��
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12c5bbbfbf4387c247e4bd802727a5a3

Code Sign

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

5e:58:85:4c:a1:f5:1e:4d:11:6b:a7:bb:67:61:f2:92:3a:4f:cb:b4:bc:57:16:01:5d:f9:ea:1d:77:12:a0:19Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

oleaut32

gdi32

user32

Sections

.text Size: - Virtual size: 211KB

.rdata Size: - Virtual size: 10KB

.data Size: - Virtual size: 38KB

.vmpã�� Size: - Virtual size: 5.0MB

.vmpã�� Size: 1024B - Virtual size: 964B

.vmpã�� Size: 6.4MB - Virtual size: 6.4MB

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 238KB - Virtual size: 237KB

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

5e:58:85:4c:a1:f5:1e:4d:11:6b:a7:bb:67:61:f2:92:3a:4f:cb:b4:bc:57:16:01:5d:f9:ea:1d:77:12:a0:19
Signer

.text
Size: - Virtual size: 211KB

.rdata
Size: - Virtual size: 10KB

.data
Size: - Virtual size: 38KB

.vmpã��
Size: - Virtual size: 5.0MB

.vmpã��
Size: 1024B - Virtual size: 964B

.vmpã��
Size: 6.4MB - Virtual size: 6.4MB

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 238KB - Virtual size: 237KB