f66eb52da2a7318feafecebdef7ffa9deeb07cf2f7f46cbb6319ac06bf714ef6[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f66eb52da2a7318feafecebdef7ffa9deeb07cf2f7f46cbb6319ac06bf714ef6.exe
Size

2.3MB
MD5

80cd28809e5c43841d168741d554fa7a
SHA1

2f473ec521c912e4f9d23cefb24dd70f4e03bc61
SHA256

f66eb52da2a7318feafecebdef7ffa9deeb07cf2f7f46cbb6319ac06bf714ef6
SHA512

73fea9ab7538a17086f07bb84e2d3fda3d2ffdc8534a3f6e130ab754c4f18ff054284667733c0dd1ed03bcdeb14bd205f436b0ddb1eab9e02af36a240347cd5c
SSDEEP

49152:G3zZTYzhfN+h29eJdu2Cjt8ysZMiKEeFJa8zQO5FJ8VBi3UY26PSveaTp:8zlqT8dTCZjs5KHa8zQs3oJ

Score

1^/10

Malware Config

Signatures

Files

f66eb52da2a7318feafecebdef7ffa9deeb07cf2f7f46cbb6319ac06bf714ef6.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:4c:75:be:1c:89:00:06:7f:86:19:da:f8:7a:de:ac:c7:fb:3a:3a:36:e1:d2:1d:62:2d:d5:80:bb:4a:f8:2f
Signer

Actual PE Digest

0a:4c:75:be:1c:89:00:06:7f:86:19:da:f8:7a:de:ac:c7:fb:3a:3a:36:e1:d2:1d:62:2d:d5:80:bb:4a:f8:2f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

0a:4c:75:be:1c:89:00:06:7f:86:19:da:f8:7a:de:ac:c7:fb:3a:3a:36:e1:d2:1d:62:2d:d5:80:bb:4a:f8:2fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rsrc Size: 108KB - Virtual size: 108KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

0a:4c:75:be:1c:89:00:06:7f:86:19:da:f8:7a:de:ac:c7:fb:3a:3a:36:e1:d2:1d:62:2d:d5:80:bb:4a:f8:2f
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rsrc
Size: 108KB - Virtual size: 108KB

.reloc
Size: 512B - Virtual size: 12B