eb326d0f864bbea68668b832b1fbbf8e3a1772f2e23fd824419a6712be0f3cdf

Sharing

Copy URL Twitter E-mail

General

Target

eb326d0f864bbea68668b832b1fbbf8e3a1772f2e23fd824419a6712be0f3cdf
Size

876KB
MD5

b01a9dbee4833e27fc021b71490023e9
SHA1

57e3a5db944896f0a5c8328b3fc7166c8a3816a3
SHA256

eb326d0f864bbea68668b832b1fbbf8e3a1772f2e23fd824419a6712be0f3cdf
SHA512

ce453618fec4bff45c63971142e57e1aed8c996dc40408dc33ac511caf49f3804f24807f1719fa1cca75b4452c3770eafabfea7e8654b941782072f4a689b3b2
SSDEEP

24576:176laFV8XjsGCb93Rt+iTa98uKo+nNeMBZT6fdIoIJ:4kH8X4LHaWQWTcm

Score

1^/10

Malware Config

Signatures

Files

eb326d0f864bbea68668b832b1fbbf8e3a1772f2e23fd824419a6712be0f3cdf
.exe windows:0 windows x64 arch:x64

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:be:4e:64:2c:b4:7d:55:2f:89:15:9d:03:2e:fd:18:51:3a:0f:dd:90:98:0b:84:1c:58:26:f4:19:fa:12:82
Signer

Actual PE Digest

67:be:4e:64:2c:b4:7d:55:2f:89:15:9d:03:2e:fd:18:51:3a:0f:dd:90:98:0b:84:1c:58:26:f4:19:fa:12:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

winresume.pdb

Sections

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGER32C
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INITDATA
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

67:be:4e:64:2c:b4:7d:55:2f:89:15:9d:03:2e:fd:18:51:3a:0f:dd:90:98:0b:84:1c:58:26:f4:19:fa:12:82Signer

Headers

File Characteristics

PDB Paths

Sections

.text Size: 717KB - Virtual size: 716KB

PAGER32C Size: 1024B - Virtual size: 729B

PAGE Size: 6KB - Virtual size: 6KB

INITDATA Size: - Virtual size: 3KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 2KB - Virtual size: 214KB

.pdata Size: 25KB - Virtual size: 24KB

.gfids Size: 2KB - Virtual size: 1KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 1KB

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

67:be:4e:64:2c:b4:7d:55:2f:89:15:9d:03:2e:fd:18:51:3a:0f:dd:90:98:0b:84:1c:58:26:f4:19:fa:12:82
Signer

.text
Size: 717KB - Virtual size: 716KB

PAGER32C
Size: 1024B - Virtual size: 729B

PAGE
Size: 6KB - Virtual size: 6KB

INITDATA
Size: - Virtual size: 3KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 2KB - Virtual size: 214KB

.pdata
Size: 25KB - Virtual size: 24KB

.gfids
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 1KB