c863873f23b56fe7bc1e2b2f01c8bb99

Sharing

Copy URL

Twitter E-mail

General

Target

c863873f23b56fe7bc1e2b2f01c8bb99
Size

287KB
MD5

c863873f23b56fe7bc1e2b2f01c8bb99
SHA1

78a65b1218e28d5095952ed2c443e62fb0645df2
SHA256

911258f156ba8725275862c8a1634ebd1d917fa68ec81dec7c0430005334f9d4
SHA512

0b24761b0f7bb182e3535ae5c495fd78277df7de6c3898d9f36d6f23e7b1920a9d6e3712c213f9a6ed314a71d3202e31e1e032f5c953de256a74128affbb54e3
SSDEEP

6144:YMhZtdd5SyJ8PDc7iv0GecKTiH8KPF+Jv85oHvsJBtNd51sks8L:YM/Ld5S8QDdEcKON+585oPgIv8L

Score

1^/10

Malware Config

Signatures

Files

c863873f23b56fe7bc1e2b2f01c8bb99
.exe windows:6 windows x64 arch:x64

18eaab906917ae2e5bb0e31af5a223e8

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:00:c7:61:4f:86:d7:5f:e4:ee:3f:61:92:b6:fe:da
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/07/2021, 00:00

Not After

19/07/2022, 23:59

Subject

SERIALNUMBER=42492043,CN=StackUp ApS,O=StackUp ApS,L=Kastrup,C=DK,1.3.6.1.4.1.311.60.2.1.3=#1302444b,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:a6:88:6d:aa:39:b9:49:a3:3b:95:cd:3d:88:60:a0:39:03:50:d4
Signer

Actual PE Digest

0c:a6:88:6d:aa:39:b9:49:a3:3b:95:cd:3d:88:60:a0:39:03:50:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateMutexA
ExitProcess
GlobalAlloc
WriteFile
GetCommandLineA
HeapFree
Sleep
VirtualAlloc
VirtualProtect
GetFileSize
CreateFileA
CloseHandle
lstrcmpA
GetSystemTime
GetProcessHeap
HeapAlloc
GetLastError

user32

SetWindowTextA
GetKeyboardLayout
ActivateKeyboardLayout
MessageBoxA
SetCursorPos
RegisterClassA

gdi32

SetBkMode
CreateFontIndirectA
GetTextExtentPoint32A
SetBkColor
DeleteObject
SetTextColor

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18eaab906917ae2e5bb0e31af5a223e8

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:00:c7:61:4f:86:d7:5f:e4:ee:3f:61:92:b6:fe:daCertificate

Extended Key Usages

Key Usages

0c:a6:88:6d:aa:39:b9:49:a3:3b:95:cd:3d:88:60:a0:39:03:50:d4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 257KB - Virtual size: 256KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 256B

.pdata Size: 1024B - Virtual size: 624B

.CRT Size: 512B - Virtual size: 8B

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:00:c7:61:4f:86:d7:5f:e4:ee:3f:61:92:b6:fe:da
Certificate

0c:a6:88:6d:aa:39:b9:49:a3:3b:95:cd:3d:88:60:a0:39:03:50:d4
Signer

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 257KB - Virtual size: 256KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 256B

.pdata
Size: 1024B - Virtual size: 624B

.CRT
Size: 512B - Virtual size: 8B

.reloc
Size: 512B - Virtual size: 12B