2d7f47a555a31ed3c0c4ee78c09fe279[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

2d7f47a555a31ed3c0c4ee78c09fe279.bin
Size

17.1MB
MD5

aea852f7e7d262a176ec824504a13e44
SHA1

7d5cc77a170b2266497eaf4cb18747b04915f9d0
SHA256

b067280d52c2f19d269b7ed04173756437aef5e6882b735d1e7a1b89d81bd56e
SHA512

e59f4709295f9f74cf25310a00793a01fbe32270be0823017d9c634dc989d6603a3a0292ed40e812f126eb9fbb7810278285edf514569024f8eecc845e51978a
SSDEEP

393216:L2P20sq0pwGsr35Xx2hQwcOvSN1aQB7QZn9Oe1APORGc0bO4YxhrqtXjm0uNUx:P0sLpBcRx/s2ZQZncBGReq4YutXjm0uo

Score

1^/10

Malware Config

Signatures

Files

2d7f47a555a31ed3c0c4ee78c09fe279.bin
.zip

Password: infected
ac9de8e32c98ac5ef1882fa954aa1bbc59757904b5c4faa00e0c8431133643bd.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Code Sign

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aa
Certificate

Issuer

CN=Actalis Code Signing CA G2,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Not Before

26/10/2023, 14:24

Not After

26/10/2026, 14:24

Subject

CN=EDENA S.R.L.,O=EDENA S.R.L.,L=CATANIA,ST=Catania,C=IT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0e
Certificate

Issuer

CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT

Not Before

10/03/2023, 13:01

Not After

22/09/2030, 11:22

Subject

CN=Actalis Time Stamping CA G1,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3
Certificate

Issuer

CN=Actalis Time Stamping CA G1,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Not Before

10/05/2023, 08:57

Not After

22/09/2030, 11:22

Subject

CN=Actalis Time-Stamping Authority TSU 2,OU=Time Stamping Authority,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

28:a8:e7:98:12:e1:c4:d7:74:0c:07:ec:58:d8:09:53:2e:33:28:ee:1b:24:d4:49:8d:25:1e:66:d2:bf:f2:79
Signer

Actual PE Digest

28:a8:e7:98:12:e1:c4:d7:74:0c:07:ec:58:d8:09:53:2e:33:28:ee:1b:24:d4:49:8d:25:1e:66:d2:bf:f2:79

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aaCertificate

Extended Key Usages

Key Usages

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0eCertificate

Extended Key Usages

Key Usages

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3Certificate

Extended Key Usages

Key Usages

28:a8:e7:98:12:e1:c4:d7:74:0c:07:ec:58:d8:09:53:2e:33:28:ee:1b:24:d4:49:8d:25:1e:66:d2:bf:f2:79Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 164KB - Virtual size: 164KB

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aa
Certificate

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0e
Certificate

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3
Certificate

28:a8:e7:98:12:e1:c4:d7:74:0c:07:ec:58:d8:09:53:2e:33:28:ee:1b:24:d4:49:8d:25:1e:66:d2:bf:f2:79
Signer

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 164KB - Virtual size: 164KB