bc64c0e5dbadedb56360ea6f56ba96f0

Sharing

Copy URL Twitter E-mail

General

Target

bc64c0e5dbadedb56360ea6f56ba96f0
Size

519KB
MD5

bc64c0e5dbadedb56360ea6f56ba96f0
SHA1

99b31d89626c455a18532e4759c78bedbaa1ca17
SHA256

318ca24fe3ce059c1fdd9dccfc9b9c2ef7266966894f4f24d1af549bc4107886
SHA512

baedafa3e9bc580f1ddadbc0fc60037770653d447b7c8338307ffdb5588509764ae1821ed17b79420db54df0528bb9d09018336e93671bfd1c8a03065f215288
SSDEEP

12288:H4iy1MJz7bLg0EKsWmAhndfnZs8svfozjC:6yeQsWmAhBIvfozjC

Score

1^/10

Malware Config

Signatures

Files

bc64c0e5dbadedb56360ea6f56ba96f0
.exe windows:4 windows x86 arch:x86

Code Sign

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:25

Not After

02/05/2020, 21:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:5f:54:97:d2:1e:85:54:dd:37:d0:14:e1:45:94:5e:21:ee:da:1d:09:49:42:f5:2e:fb:04:e1:f3:65:ff:30
Signer

Actual PE Digest

65:5f:54:97:d2:1e:85:54:dd:37:d0:14:e1:45:94:5e:21:ee:da:1d:09:49:42:f5:2e:fb:04:e1:f3:65:ff:30

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Svc_host.pdb

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cfCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

65:5f:54:97:d2:1e:85:54:dd:37:d0:14:e1:45:94:5e:21:ee:da:1d:09:49:42:f5:2e:fb:04:e1:f3:65:ff:30Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 108KB - Virtual size: 107KB

.sdata Size: 512B - Virtual size: 498B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.enigma1 Size: 120KB - Virtual size: 8KB

.enigma2 Size: 280KB - Virtual size: 280KB

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

65:5f:54:97:d2:1e:85:54:dd:37:d0:14:e1:45:94:5e:21:ee:da:1d:09:49:42:f5:2e:fb:04:e1:f3:65:ff:30
Signer

.text
Size: 108KB - Virtual size: 107KB

.sdata
Size: 512B - Virtual size: 498B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.enigma1
Size: 120KB - Virtual size: 8KB

.enigma2
Size: 280KB - Virtual size: 280KB