2995a32ff1e997953206e798dd59100eb3d51292f7e1cf42d2cd051f0fddb401

Sharing

Copy URL Twitter E-mail

General

Target

2995a32ff1e997953206e798dd59100eb3d51292f7e1cf42d2cd051f0fddb401
Size

1.2MB
MD5

040c80a39c12a089e5b92714f86fe214
SHA1

3a614411db8df61e6e2d2830fff8314dedb59114
SHA256

2995a32ff1e997953206e798dd59100eb3d51292f7e1cf42d2cd051f0fddb401
SHA512

613b186d811743f7b5773841479a4dd24b7c24aa277c68bcee806aa4ed20bd9e25585db98f5a30441ffafcc06440a4c04cfd1860e70a955c7b30bb71ff151b7b
SSDEEP

24576:gtnlWaQkIo1doqg++6XmlNSv2uZ0tPBq1Wu8X2Zxr0AygvsF2Q4dLj:ClWa4q9oNHuZmqP8mZlMgvc2xh

Score

1^/10

Malware Config

Signatures

Files

2995a32ff1e997953206e798dd59100eb3d51292f7e1cf42d2cd051f0fddb401
.exe windows:4 windows x64 arch:x64

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:fd:94:87:a7:7d:1a:ce:34:a3:3d:45:15:7c:9d:af:4b:ec:a8:1f:4c:0c:a1:ae:af:82:f7:81:43:ce:a3:3a
Signer

Actual PE Digest

fa:fd:94:87:a7:7d:1a:ce:34:a3:3d:45:15:7c:9d:af:4b:ec:a8:1f:4c:0c:a1:ae:af:82:f7:81:43:ce:a3:3a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fa:fd:94:87:a7:7d:1a:ce:34:a3:3d:45:15:7c:9d:af:4b:ec:a8:1f:4c:0c:a1:ae:af:82:f7:81:43:ce:a3:3aSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 122KB - Virtual size: 121KB

33:00:00:02:d0:e7:eb:7c:2e:f6:ce:23:e1:00:00:00:00:02:d0
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fa:fd:94:87:a7:7d:1a:ce:34:a3:3d:45:15:7c:9d:af:4b:ec:a8:1f:4c:0c:a1:ae:af:82:f7:81:43:ce:a3:3a
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 122KB - Virtual size: 121KB