pivot_v5-2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

pivot_v5-2.exe
Size

660KB
MD5

f577fc68521d8ca399edd72ac913255d
SHA1

8ff05351f4d8f3c4c80ed4985590e8ab1b989ea1
SHA256

ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509
SHA512

ce2497db91582a1d21093e1e08fd33bb91d7f93081045e716cc46c2b4b24f65ec4dbe8ce7149109c4a713b55a13706cfda967fdbd466d3c1c00024f4761f0e38
SSDEEP

12288:zymCv84Lnka4eec2ZZEhl3qgi4JpXBLUbBinP7:zIv84Lnk5LEhl3qZs1P7

Score

1^/10

Malware Config

Signatures

Files

pivot_v5-2.exe
.exe windows:4 windows x86 arch:x86

Password: YUDHJSGDDGKIDGHKDG

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6c:d9:2d:7f:a0:d1:38:f5:7f:8f:20:2e:2d:65:58:af
Certificate

Issuer

CN=Domain The Net Technologies Ltd CA for Code Signing R2,O=Domain The Net Technologies Ltd,C=IL

Not Before

16-04-2023 13:42

Not After

30-03-2024 17:10

Subject

CN=Motus Software Ltd,O=Motus Software Ltd,L=Lewes,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6f
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26-03-2019 17:33

Not After

22-03-2034 17:33

Subject

CN=SSL.com Code Signing Enterprise Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:be
Certificate

Issuer

CN=SSL.com Code Signing Enterprise Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

01-04-2019 17:10

Not After

30-03-2024 17:10

Subject

CN=Domain The Net Technologies Ltd CA for Code Signing R2,O=Domain The Net Technologies Ltd,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f0:f0:4a:27:8d:f3:57:5f:77:a8:12:99:81:5f:ec:77:af:4f:6c:1a:bb:26:96:46:75:62:84:00:4a:60:59:af
Signer

Actual PE Digest

f0:f0:4a:27:8d:f3:57:5f:77:a8:12:99:81:5f:ec:77:af:4f:6c:1a:bb:26:96:46:75:62:84:00:4a:60:59:af

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: YUDHJSGDDGKIDGHKDG

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6c:d9:2d:7f:a0:d1:38:f5:7f:8f:20:2e:2d:65:58:afCertificate

Extended Key Usages

Key Usages

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6fCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:beCertificate

Extended Key Usages

Key Usages

f0:f0:4a:27:8d:f3:57:5f:77:a8:12:99:81:5f:ec:77:af:4f:6c:1a:bb:26:96:46:75:62:84:00:4a:60:59:afSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 599KB - Virtual size: 598KB

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 512B - Virtual size: 12B

6c:d9:2d:7f:a0:d1:38:f5:7f:8f:20:2e:2d:65:58:af
Certificate

5b:7f:54:38:25:e4:1a:a1:2a:de:21:43:9c:df:e6:6f
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

5e:1b:74:73:09:52:b1:fa:3e:0d:4a:9c:50:a8:da:be
Certificate

f0:f0:4a:27:8d:f3:57:5f:77:a8:12:99:81:5f:ec:77:af:4f:6c:1a:bb:26:96:46:75:62:84:00:4a:60:59:af
Signer

.text
Size: 599KB - Virtual size: 598KB

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 512B - Virtual size: 12B