K6WLFyL6EH[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

K6WLFyL6EH.exe
Size

11.8MB
MD5

4c015c3972db24a77316c56cd01c5468
SHA1

38a0ac1bb0cae3db263ea1212fe90165de2d726b
SHA256

320e63d3a2f70fdf24db8e00c4811fe4b78e896946d99df6aeca1756bb986f99
SHA512

4aba6313bd4634306024f2e0510efd14facfa8224ba835ead5f42f69a6af62a0c4f734a3a4a9362b0e5cfc76f512fd1ab4a2a1bc4c83c9abc2f1e5124072992e
SSDEEP

196608:HL9liQYsBankZ9n3wvZSOuwRcEFeF270WtvxhOIdO+Y9NkSCnyX:HniQYsBkkZ9n3wxhKGewXtvxhOIdcbx

Score

1^/10

Malware Config

Signatures

Files

K6WLFyL6EH.exe
.exe windows:6 windows x64 arch:x64

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:a1:64:d8:96:51:c2:2b:06:db:56:79:aa:09:d2:7f
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

04/04/2023, 00:00

Not After

03/04/2026, 23:59

Subject

CN=Manthe Industries\, LLC,O=Manthe Industries\, LLC,L=Green Bay,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4d:92:47:7c:0d:c8:dd:0b:52:d8:fa:40:be:ad:2b:0e:a8:6f:21:94
Signer

Actual PE Digest

4d:92:47:7c:0d:c8:dd:0b:52:d8:fa:40:be:ad:2b:0e:a8:6f:21:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 434KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.loadcon
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 380B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

02:a1:64:d8:96:51:c2:2b:06:db:56:79:aa:09:d2:7fCertificate

Extended Key Usages

Key Usages

4d:92:47:7c:0d:c8:dd:0b:52:d8:fa:40:be:ad:2b:0e:a8:6f:21:94Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 801KB - Virtual size: 801KB

.data Size: 434KB - Virtual size: 492KB

.pdata Size: 192KB - Virtual size: 192KB

_RDATA Size: 512B - Virtual size: 348B

.data Size: 13KB - Virtual size: 13KB

.reloc Size: 33KB - Virtual size: 32KB

.idata Size: 2KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 6KB

.text Size: - Virtual size: 10.0MB

.loadcon Size: 512B - Virtual size: 4KB

.text Size: 7.5MB - Virtual size: 7.5MB

.init Size: 512B - Virtual size: 512B

.data Size: 18KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 20KB

.reloc Size: 380B - Virtual size: 4KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

02:a1:64:d8:96:51:c2:2b:06:db:56:79:aa:09:d2:7f
Certificate

4d:92:47:7c:0d:c8:dd:0b:52:d8:fa:40:be:ad:2b:0e:a8:6f:21:94
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 801KB - Virtual size: 801KB

.data
Size: 434KB - Virtual size: 492KB

.pdata
Size: 192KB - Virtual size: 192KB

_RDATA
Size: 512B - Virtual size: 348B

.data
Size: 13KB - Virtual size: 13KB

.reloc
Size: 33KB - Virtual size: 32KB

.idata
Size: 2KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 6KB

.text
Size: - Virtual size: 10.0MB

.loadcon
Size: 512B - Virtual size: 4KB

.text
Size: 7.5MB - Virtual size: 7.5MB

.init
Size: 512B - Virtual size: 512B

.data
Size: 18KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 20KB

.reloc
Size: 380B - Virtual size: 4KB