c5d5e375ad6d0468e721f8cf8fece0a0

Sharing

Copy URL Twitter E-mail

General

Target

c5d5e375ad6d0468e721f8cf8fece0a0
Size

216KB
MD5

c5d5e375ad6d0468e721f8cf8fece0a0
SHA1

230ab42557dba15dcf68201836af0588f73a7d89
SHA256

ccd581a54242394412df23a7e12527b1c20d21e17a737bc64e4198d47a6a43b1
SHA512

851521b01793bd1edb0a67d9985e5de577e9db90fe7d087374c433551b62dec4c3d7047f136ce72ad1a351f8e4d59125aef145be0ec93d65ee53e93c67221323
SSDEEP

1536:2XvGkNPP9UUrFzYCd8BhkNUP9UUrFzYCd8xkIn3hs+rX:2/GkNCUBzGBhkNJUBzGxkIy+rX

Score

1^/10

Malware Config

Signatures

Files

c5d5e375ad6d0468e721f8cf8fece0a0
.exe windows:4 windows x64 arch:x64

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a9:72:3e:e7:b9:35:a0:b9
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

30/07/2019, 15:26

Not After

29/05/2022, 23:44

Subject

CN=Asurvio\, LP,O=Asurvio\, LP,L=Austin,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a9:72:3e:e7:b9:35:a0:b9
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

30/07/2019, 15:26

Not After

29/05/2022, 23:44

Subject

CN=Asurvio\, LP,O=Asurvio\, LP,L=Austin,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

95:67:f0:79:50:97:22:f8:13:46:e1:02:1a:3d:fb:a7:1b:98:b7:da:5c:47:44:b0:d9:aa:c3:cd:d1:59:50:d8
Signer

Actual PE Digest

95:67:f0:79:50:97:22:f8:13:46:e1:02:1a:3d:fb:a7:1b:98:b7:da:5c:47:44:b0:d9:aa:c3:cd:d1:59:50:d8

Digest Algorithm

sha256

PE Digest Matches

true

58:9d:8d:00:18:d3:05:44:42:c3:bf:41:61:9b:e5:2c:ea:7d:7c:24
Signer

Actual PE Digest

58:9d:8d:00:18:d3:05:44:42:c3:bf:41:61:9b:e5:2c:ea:7d:7c:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\BuildAgents\ProwlDevOps1\_work\8\s\DriversHQ\DSOne\AgentMonitor\obj\x64\TFSBuild\DSOneWD.pdb

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

07Certificate

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

a9:72:3e:e7:b9:35:a0:b9Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

a9:72:3e:e7:b9:35:a0:b9Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

95:67:f0:79:50:97:22:f8:13:46:e1:02:1a:3d:fb:a7:1b:98:b7:da:5c:47:44:b0:d9:aa:c3:cd:d1:59:50:d8Signer

58:9d:8d:00:18:d3:05:44:42:c3:bf:41:61:9b:e5:2c:ea:7d:7c:24Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 103KB - Virtual size: 102KB

.rsrc Size: 99KB - Virtual size: 99KB

07
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

a9:72:3e:e7:b9:35:a0:b9
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

07
Certificate

a9:72:3e:e7:b9:35:a0:b9
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

95:67:f0:79:50:97:22:f8:13:46:e1:02:1a:3d:fb:a7:1b:98:b7:da:5c:47:44:b0:d9:aa:c3:cd:d1:59:50:d8
Signer

58:9d:8d:00:18:d3:05:44:42:c3:bf:41:61:9b:e5:2c:ea:7d:7c:24
Signer

.text
Size: 103KB - Virtual size: 102KB

.rsrc
Size: 99KB - Virtual size: 99KB