e492f0037752d24f754b5f5c766531727cfcc3de36343575f9f94619c3fd6266

Sharing

Copy URL Twitter E-mail

General

Target

e492f0037752d24f754b5f5c766531727cfcc3de36343575f9f94619c3fd6266
Size

1.5MB
MD5

22b604d195b098037bc6aa50fefb0a50
SHA1

205eeb068163282ea1fe63c203c67addf2c78f3b
SHA256

e492f0037752d24f754b5f5c766531727cfcc3de36343575f9f94619c3fd6266
SHA512

8854a50eeb326f4f8bba9fb2ebbab6c6046803dcb6cceb96e09e5aec920fca4e24819aeed38998ffbf5f8c17d0d40a7b3221e6e62291b94184100dd376a3b919
SSDEEP

24576:etnlWaQkIo1doqg++6XmlNSv2uZ0tPBq1Wu8X2Zxr0AygvsF2Q4:MlWa4q9oNHuZmqP8mZlMgvc2x

Score

1^/10

Malware Config

Signatures

Files

e492f0037752d24f754b5f5c766531727cfcc3de36343575f9f94619c3fd6266
.exe windows:4 windows x64 arch:x64

Code Sign

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9e
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/12/2018, 00:00

Not After

06/12/2023, 23:59

Subject

CN=Red Gate Software Ltd,O=Red Gate Software Ltd,POSTALCODE=CB4 0WZ,STREET=Cambridge Business Park+STREET=Newnham House 12,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9e
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/12/2018, 00:00

Not After

06/12/2023, 23:59

Subject

CN=Red Gate Software Ltd,O=Red Gate Software Ltd,POSTALCODE=CB4 0WZ,STREET=Cambridge Business Park+STREET=Newnham House 12,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:90:a2:17:6d:9c:58:24:de:18:52:72:4d:1b:78:f8:a2:14:37:94:a8:c9:9f:fb:a5:09:7c:90:d6:0f:d7:d9
Signer

Actual PE Digest

15:90:a2:17:6d:9c:58:24:de:18:52:72:4d:1b:78:f8:a2:14:37:94:a8:c9:9f:fb:a5:09:7c:90:d6:0f:d7:d9

Digest Algorithm

sha256

PE Digest Matches

false

80:c5:18:db:a7:16:0b:62:f7:f0:b0:45:d8:f6:6c:d8:3b:62:76:da
Signer

Actual PE Digest

80:c5:18:db:a7:16:0b:62:f7:f0:b0:45:d8:f6:6c:d8:3b:62:76:da

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9eCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9eCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

15:90:a2:17:6d:9c:58:24:de:18:52:72:4d:1b:78:f8:a2:14:37:94:a8:c9:9f:fb:a5:09:7c:90:d6:0f:d7:d9Signer

80:c5:18:db:a7:16:0b:62:f7:f0:b0:45:d8:f6:6c:d8:3b:62:76:daSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 362KB - Virtual size: 361KB

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9e
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

9a:60:9f:98:a9:9b:c2:99:6c:87:e8:e6:0b:2b:7c:9e
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

15:90:a2:17:6d:9c:58:24:de:18:52:72:4d:1b:78:f8:a2:14:37:94:a8:c9:9f:fb:a5:09:7c:90:d6:0f:d7:d9
Signer

80:c5:18:db:a7:16:0b:62:f7:f0:b0:45:d8:f6:6c:d8:3b:62:76:da
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 362KB - Virtual size: 361KB