fb68501a92aa495f0ddbd07c244968310601cb9cd48fb81eefd161c9c0101fbd

Sharing

Copy URL Twitter E-mail

General

Target

fb68501a92aa495f0ddbd07c244968310601cb9cd48fb81eefd161c9c0101fbd
Size

6.6MB
MD5

7a29dc461c404ae7910fff86cea26208
SHA1

56a3c19ac6dc68d36f51689412a4514eea326ae1
SHA256

fb68501a92aa495f0ddbd07c244968310601cb9cd48fb81eefd161c9c0101fbd
SHA512

1056b5d40621325c9ed02a69a74bf6273f8fbb6a77f095a4c3b86c37c082497e2094aaa5bbdae1dcab93f431c33aa0cef1c93074a6b0d1b51c6d57f670cba6fa
SSDEEP

98304:9SEgyD07D88enS7rXixP8QYBKA85KDVcdGcfDXfgwfG16qMQRNILtvGdH+JaxSzi:9qKe8Iy9cBwqy4cfLtfdpoX

Score

1^/10

Malware Config

Signatures

Files

fb68501a92aa495f0ddbd07c244968310601cb9cd48fb81eefd161c9c0101fbd
.dll windows:6 windows x86 arch:x86

31669f7a7efecf5dccb249372361ae23

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:e4:8d:2c:6f:74:d7:1e:7f:83:e3:f6:ae:10:7a:2a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

05/08/2020, 00:00

Not After

10/08/2023, 12:00

Subject

SERIALNUMBER=01020602,CN=Malvern Panalytical Ltd.,O=Malvern Panalytical Ltd.,L=MALVERN,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:3c:5d:f7:87:56:97:fb:8f:0b:f5:b2:ff:14:ee:07:ab:a4:a8:9a:43:b3:22:65:db:58:04:1c:2c:8b:86:1e
Signer

Actual PE Digest

dc:3c:5d:f7:87:56:97:fb:8f:0b:f5:b2:ff:14:ee:07:ab:a4:a8:9a:43:b3:22:65:db:58:04:1c:2c:8b:86:1e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

advapi32

GetAce

iphlpapi

GetIfTable

shell32

ILFree

hid

HidP_GetCaps

setupapi

SetupInstallFileA

dhcpcsvc

DhcpIsEnabled

dhcpcsvc6

Dhcpv6IsEnabled

psapi

EnumProcesses

wsock32

bind

winhttp

WinHttpOpen

oleaut32

VariantInit

Exports

Exports

LicensingCR
LicensingCRFree
LicensingCRManaged
LicensingFinalize
LicensingInitialize
LicensingInitializeManaged

Sections

.AKS1
Size: 3.3MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS2
Size: 3.3MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

31669f7a7efecf5dccb249372361ae23

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

04:e4:8d:2c:6f:74:d7:1e:7f:83:e3:f6:ae:10:7a:2aCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

dc:3c:5d:f7:87:56:97:fb:8f:0b:f5:b2:ff:14:ee:07:ab:a4:a8:9a:43:b3:22:65:db:58:04:1c:2c:8b:86:1eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

iphlpapi

shell32

hid

setupapi

dhcpcsvc

dhcpcsvc6

psapi

wsock32

winhttp

oleaut32

Exports

Exports

Sections

.AKS1 Size: 3.3MB - Virtual size: 4.9MB

.AKS2 Size: 3.3MB - Virtual size: 4.8MB

.AKS3 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

04:e4:8d:2c:6f:74:d7:1e:7f:83:e3:f6:ae:10:7a:2a
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

dc:3c:5d:f7:87:56:97:fb:8f:0b:f5:b2:ff:14:ee:07:ab:a4:a8:9a:43:b3:22:65:db:58:04:1c:2c:8b:86:1e
Signer

.AKS1
Size: 3.3MB - Virtual size: 4.9MB

.AKS2
Size: 3.3MB - Virtual size: 4.8MB

.AKS3
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB