902fe93864c5ce6268f0af52591b595a03eab1e7bf322f884f7a4fec99f4782c

Sharing

Copy URL

Twitter E-mail

General

Target

902fe93864c5ce6268f0af52591b595a03eab1e7bf322f884f7a4fec99f4782c
Size

1.3MB
MD5

4eb91e3daf9a0b9f7f240c95b4abb5ff
SHA1

93518f6a2a17b17eb21a525bdf6874aa5f5a5015
SHA256

902fe93864c5ce6268f0af52591b595a03eab1e7bf322f884f7a4fec99f4782c
SHA512

5a6b7bb5e4422741427ba1e5fed9227ed713e46848c76a1b36f92a6dc2e9e1a9dacba391b71fc6716aa8a42b789a678fe40ea375364492739811b4675ee40cbc
SSDEEP

24576:tZ1v330QavP98SX0WvlgZcpekukzcGViiXZfyjcF3ayb6JkwIC:tTFgr5lgoecwvQxyjgLby

Score

1^/10

Malware Config

Signatures

Files

902fe93864c5ce6268f0af52591b595a03eab1e7bf322f884f7a4fec99f4782c
.exe windows:0 windows x64 arch:x64

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:4c:a0:cf:8d:81:79:c3:13:9f:3b:dd:1e:9f:75:de:aa:eb:00:e9:a2:66:11:8b:66:38:61:0d:e5:d3:2d:f3
Signer

Actual PE Digest

21:4c:a0:cf:8d:81:79:c3:13:9f:3b:dd:1e:9f:75:de:aa:eb:00:e9:a2:66:11:8b:66:38:61:0d:e5:d3:2d:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

winresume.pdb

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TRANSIT
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGER32C
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

21:4c:a0:cf:8d:81:79:c3:13:9f:3b:dd:1e:9f:75:de:aa:eb:00:e9:a2:66:11:8b:66:38:61:0d:e5:d3:2d:f3Signer

Headers

File Characteristics

PDB Paths

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

TRANSIT Size: 512B - Virtual size: 29B

PAGER32C Size: 1024B - Virtual size: 729B

PAGE Size: 26KB - Virtual size: 26KB

.rdata Size: 135KB - Virtual size: 134KB

.data Size: 2KB - Virtual size: 268KB

.pdata Size: 42KB - Virtual size: 41KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 3KB - Virtual size: 3KB

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

21:4c:a0:cf:8d:81:79:c3:13:9f:3b:dd:1e:9f:75:de:aa:eb:00:e9:a2:66:11:8b:66:38:61:0d:e5:d3:2d:f3
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

TRANSIT
Size: 512B - Virtual size: 29B

PAGER32C
Size: 1024B - Virtual size: 729B

PAGE
Size: 26KB - Virtual size: 26KB

.rdata
Size: 135KB - Virtual size: 134KB

.data
Size: 2KB - Virtual size: 268KB

.pdata
Size: 42KB - Virtual size: 41KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 3KB - Virtual size: 3KB