5cc6f6b9d69898c3d051509f55c982ef1336f5ac1285ad61b4c28b2ee3c16dd6

Sharing

Copy URL Twitter E-mail

General

Target

5cc6f6b9d69898c3d051509f55c982ef1336f5ac1285ad61b4c28b2ee3c16dd6
Size

5.8MB
MD5

983b78100c11a5b5ce869d48652fd6b8
SHA1

7e6ccb85c3142553a6d6c0388ece7d7b2cde5b07
SHA256

5cc6f6b9d69898c3d051509f55c982ef1336f5ac1285ad61b4c28b2ee3c16dd6
SHA512

08f2f7a91f17ca3db92304344ef51593c08ad8ef0a1eb64cecfcc1e33e0444113c6c703e8af426a12017ef78b3b94a9976e2453238d1f2ea5f6b2f8cda8bc567
SSDEEP

98304:6dCR7TasFEuNd7ijZdaHvM3JK+CXThteA64VxU3ldSbTs4QJGhOqsBryh6:6dCRPa52WXGv6JK+cTaEVxUnSbTyJ86l

Score

1^/10

Malware Config

Signatures

Files

5cc6f6b9d69898c3d051509f55c982ef1336f5ac1285ad61b4c28b2ee3c16dd6
.exe windows:6 windows x86 arch:x86

980aa255e7e76def05f32c57f38059f8

Code Sign

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3
Certificate

Issuer

CN=(C) 1998-2020 Logitech. All rights reserved.

Not Before

07/12/2023, 10:12

Not After

08/12/2033, 10:12

Subject

CN=(C) 1998-2020 Logitech. All rights reserved.

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:5d:c5:41:ee:f6:87:ca:26:4d:25:95:19:35:41:5c:9f:a2:90:a5:3d:9e:3e:72:a3:f2:b9:e0:f7:de:c6:b3
Signer

Actual PE Digest

1f:5d:c5:41:ee:f6:87:ca:26:4d:25:95:19:35:41:5c:9f:a2:90:a5:3d:9e:3e:72:a3:f2:b9:e0:f7:de:c6:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

wsprintfA

gdi32

CreateCompatibleBitmap

advapi32

RegEnumKeyA

shell32

ShellExecuteA

ole32

CoInitializeEx

ws2_32

WSAStartup

crypt32

CryptUnprotectData

shlwapi

PathFindExtensionA

gdiplus

GdiplusStartup

setupapi

SetupDiEnumDeviceInterfaces

ntdll

RtlUnicodeStringToAnsiString

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:¢×ó
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.:¢×ó
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:¢×ó
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

980aa255e7e76def05f32c57f38059f8

Code Sign

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

1f:5d:c5:41:ee:f6:87:ca:26:4d:25:95:19:35:41:5c:9f:a2:90:a5:3d:9e:3e:72:a3:f2:b9:e0:f7:de:c6:b3Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

ws2_32

crypt32

shlwapi

gdiplus

setupapi

ntdll

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 153KB

.data Size: - Virtual size: 13KB

.:¢×ó Size: - Virtual size: 2.9MB

.:¢×ó Size: 2KB - Virtual size: 1KB

.:¢×ó Size: 5.5MB - Virtual size: 5.5MB

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 248KB - Virtual size: 248KB

75:12:ce:17:65:21:7a:84:4e:1b:7a:90:84:fb:c3:e3
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

1f:5d:c5:41:ee:f6:87:ca:26:4d:25:95:19:35:41:5c:9f:a2:90:a5:3d:9e:3e:72:a3:f2:b9:e0:f7:de:c6:b3
Signer

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 153KB

.data
Size: - Virtual size: 13KB

.:¢×ó
Size: - Virtual size: 2.9MB

.:¢×ó
Size: 2KB - Virtual size: 1KB

.:¢×ó
Size: 5.5MB - Virtual size: 5.5MB

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 248KB - Virtual size: 248KB