e45421400ca64b1c137091e1fbb0cf2ec89c7e86cf552dc649da88b0b1f97760

Sharing

Copy URL Twitter E-mail

General

Target

e45421400ca64b1c137091e1fbb0cf2ec89c7e86cf552dc649da88b0b1f97760
Size

19KB
MD5

74cf8a4ad74306c5326f2870d8fec319
SHA1

a85ad326ac2276e16e52a82f23ff3d4c83d1a5d0
SHA256

e45421400ca64b1c137091e1fbb0cf2ec89c7e86cf552dc649da88b0b1f97760
SHA512

3b8d55bbc8b2d350e16496a3761e38373d93bdf84017119ecdf4381f5bc9968c47dd399df28a91ab486cfa8346c2d0d23e5b86eac226f49df7cdf3dca2f6e598
SSDEEP

384:vs7e3KO8LCKMbUAXEIoKy4KW2GATKqfDwcJCXlkFLrnCm/tH:B3cFOEIzNuUV1kFXCKd

Score

1^/10

Malware Config

Signatures

Files

e45421400ca64b1c137091e1fbb0cf2ec89c7e86cf552dc649da88b0b1f97760
.exe windows:4 windows x86 arch:x86

e2ff4b663fd54e53dd26d3c419b74641

Code Sign

33:8d:99:02:94:20:30:c1:10:28:08:67:b0:cc:58:d3
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

10/08/2022, 20:40

Not After

04/08/2025, 18:02

Subject

SERIALNUMBER=L21603842,CN=Admiral Instruments\, LLC,O=Admiral Instruments\, LLC,L=Tempe,ST=Arizona,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#13074172697a6f6e61,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:1f:14:a7:9f:09:4f:14:c4:97:16:ca:65:14:46:df:c8:70:d5:72:fb:77:a0:c8:d2:3e:1e:5e:26:8b:6c:7e
Signer

Actual PE Digest

c9:1f:14:a7:9f:09:4f:14:c4:97:16:ca:65:14:46:df:c8:70:d5:72:fb:77:a0:c8:d2:3e:1e:5e:26:8b:6c:7e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hid

HidD_GetAttributes
HidD_GetHidGuid

kernel32

CancelIo
CloseHandle
CreateEventA
CreateFileA
ExitProcess
FormatMessageA
GetLastError
GetModuleHandleA
GetOverlappedResult
GetProcAddress
ResetEvent
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WriteFile

msvcrt

_stricmp
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
exit
fclose
fflush
fgets
fopen
fprintf
fputc
free
fwrite
malloc
memcpy
memset
printf
puts
signal
sscanf
strchr
vfprintf
vprintf

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

winmm

timeGetTime

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2ff4b663fd54e53dd26d3c419b74641

Code Sign

33:8d:99:02:94:20:30:c1:10:28:08:67:b0:cc:58:d3Certificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

c9:1f:14:a7:9f:09:4f:14:c4:97:16:ca:65:14:46:df:c8:70:d5:72:fb:77:a0:c8:d2:3e:1e:5e:26:8b:6c:7eSigner

Headers

File Characteristics

Imports

hid

kernel32

msvcrt

setupapi

winmm

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 24B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2.0MB

.idata Size: 2KB - Virtual size: 1KB

33:8d:99:02:94:20:30:c1:10:28:08:67:b0:cc:58:d3
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

c9:1f:14:a7:9f:09:4f:14:c4:97:16:ca:65:14:46:df:c8:70:d5:72:fb:77:a0:c8:d2:3e:1e:5e:26:8b:6c:7e
Signer

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 24B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2.0MB

.idata
Size: 2KB - Virtual size: 1KB