LoadTeamSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

LoadTeamSetup.exe
Size

61KB
MD5

55db07e30b619f2089f88ad3f3b3c7cf
SHA1

1f4a7ba9521fc58685f753430238047aa99de1a9
SHA256

a63f22101a4c8c1f65c2f7ac17363db7d417b231da4ac9bcf6fae955e043d736
SHA512

0cdd0695a31aa47ea00008acdb82206d1960b22a92d46b5dedeef01322a6a1de54768b5e7bfbd8d05027909d067e96057251b04174c3f168e7a4f5914eb24176
SSDEEP

1536:rwdtPkeu+bk/mPcr9b1g8BLvDZRTVwyO6kTK5:rwdBbk/mEr9b1zLvDZD1Bj5

Score

1^/10

Malware Config

Signatures

Files

LoadTeamSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:e7:15
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

01/01/2014, 07:00

Not After

30/05/2031, 07:00

Subject

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f4:eb:70:b1:fd:8e:2d:e6
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

11/02/2020, 22:43

Not After

11/02/2023, 22:43

Subject

CN=LoadTeam,O=LoadTeam,L=Thorndon,ST=Wellington,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f3:a2:84:25:75:8e:1e:7c:b3:f3:b8:90:4a:a1:e6:a2:86:18:62:61:6a:16:6d:46:ee:9a:10:98:81:ac:09:24
Signer

Actual PE Digest

f3:a2:84:25:75:8e:1e:7c:b3:f3:b8:90:4a:a1:e6:a2:86:18:62:61:6a:16:6d:46:ee:9a:10:98:81:ac:09:24

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Source\LoadTeam\LoadTeam.WindowsClient.Setup\obj\Release\LoadTeamSetup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:e7:15Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

f4:eb:70:b1:fd:8e:2d:e6Certificate

Extended Key Usages

Key Usages

f3:a2:84:25:75:8e:1e:7c:b3:f3:b8:90:4a:a1:e6:a2:86:18:62:61:6a:16:6d:46:ee:9a:10:98:81:ac:09:24Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 29KB - Virtual size: 29KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:e7:15
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

07
Certificate

f4:eb:70:b1:fd:8e:2d:e6
Certificate

f3:a2:84:25:75:8e:1e:7c:b3:f3:b8:90:4a:a1:e6:a2:86:18:62:61:6a:16:6d:46:ee:9a:10:98:81:ac:09:24
Signer

.text
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 12B