dfe244414c8461175241ce54707eb6b6[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

dfe244414c8461175241ce54707eb6b6.exe
Size

405KB
MD5

dfe244414c8461175241ce54707eb6b6
SHA1

1c94e583b7058d01dad42d56ef5ddf17b64b5778
SHA256

6b7baa1db0d2ed5c12dfb8f289449384ff821110f9b490379c5fcd9190090f4e
SHA512

a8b872308f2e4d51bf99617bad931117921a4332d2a4b2e84c6e45bf42829999a95883b146dca93894ffbd5bcd0f03cb682468457ac2ff1cefcb43155f4225c9
SSDEEP

12288:eN6XS66ZeKgLaIGVkwpU0uNqFrNNkpICQzlG:26CNe0IGVl+qHul

Score

1^/10

Malware Config

Signatures

Files

dfe244414c8461175241ce54707eb6b6.exe
.exe windows:4 windows x64 arch:x64

Code Sign

ba:b6:f4:90:ac:c5:aa:3c:44:6b:dd:72:2f:d1:f0:47
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-04-2024 04:47

Not After

20-04-2025 04:47

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:be:5d:a1:9f:b2:86:d2:eb:29:54:b7:85:23:0b:5f:5e:ff:8c:a9:0b:92:d3:21:fb:31:29:0a:8b:e7:54:ab
Signer

Actual PE Digest

b2:be:5d:a1:9f:b2:86:d2:eb:29:54:b7:85:23:0b:5f:5e:ff:8c:a9:0b:92:d3:21:fb:31:29:0a:8b:e7:54:ab

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

ba:b6:f4:90:ac:c5:aa:3c:44:6b:dd:72:2f:d1:f0:47Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

b2:be:5d:a1:9f:b2:86:d2:eb:29:54:b7:85:23:0b:5f:5e:ff:8c:a9:0b:92:d3:21:fb:31:29:0a:8b:e7:54:abSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 37KB - Virtual size: 36KB

.rsrc Size: 3KB - Virtual size: 2KB

ba:b6:f4:90:ac:c5:aa:3c:44:6b:dd:72:2f:d1:f0:47
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

b2:be:5d:a1:9f:b2:86:d2:eb:29:54:b7:85:23:0b:5f:5e:ff:8c:a9:0b:92:d3:21:fb:31:29:0a:8b:e7:54:ab
Signer

.text
Size: 37KB - Virtual size: 36KB

.rsrc
Size: 3KB - Virtual size: 2KB