kuzaNetObf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

kuzaNetObf.exe
Size

779KB
MD5

db0903eacde6945fc3c902777d2406ad
SHA1

558ac0841a290f4bdb7d06f85ff4f5e44c47b903
SHA256

e23c0a1935904c62cf538af8e6906f2dcf70881cb478afae95541a3eabecc6b5
SHA512

8e2fb86e5679ad50dfcee96d25556b3e65159cd2e806a5f8437870ef9cb516b854223510059e983c449c5610365b782066b511ba70ba3184f26de63a059fba75
SSDEEP

12288:R6SBwZC6fNrL0FMZH9IMGldgcqWB340UHpS7nyVc9+9ifUrS:3umuH9huNKoy2tfUrS

Score

1^/10

Malware Config

Signatures

Files

kuzaNetObf.exe
.exe windows:4 windows x64 arch:x64

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

25:87:dc:4e:3f:17:94:cf:fc:53:44:54:c5:0b:c8:b2:3a:ac:79:72:ce:a1:d5:15:b6:af:cf:6f:9c:f4:80:7c
Signer

Actual PE Digest

25:87:dc:4e:3f:17:94:cf:fc:53:44:54:c5:0b:c8:b2:3a:ac:79:72:ce:a1:d5:15:b6:af:cf:6f:9c:f4:80:7c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 669KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

25:87:dc:4e:3f:17:94:cf:fc:53:44:54:c5:0b:c8:b2:3a:ac:79:72:ce:a1:d5:15:b6:af:cf:6f:9c:f4:80:7cSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 669KB - Virtual size: 669KB

.rsrc Size: 99KB - Virtual size: 99KB

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

25:87:dc:4e:3f:17:94:cf:fc:53:44:54:c5:0b:c8:b2:3a:ac:79:72:ce:a1:d5:15:b6:af:cf:6f:9c:f4:80:7c
Signer

.text
Size: 669KB - Virtual size: 669KB

.rsrc
Size: 99KB - Virtual size: 99KB