960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54

Sharing

Copy URL Twitter E-mail

General

Target
960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54
Size 433KB
Sample240505-ck95rsbd4s
SHA256 960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54
MD5 f5a913ca87d265739e16b6fa6a9ad1b1
SHA1 0a73e312f2c32e118c02a6b200c20728178ec751
SHA512 6e85b041bbeece397aff7781912fa63dcc57d31fdc0af97a816f9cff0befc07ea7caaaea94623e0a8fcc911c58e712ecfc8c7e2befdba65bf7dd044f970e4065
SSDEEP 6144:CRsDjVdRQ/vqkg1gEagdQH8VdRQ/vqkg1gEagdQHGVdRQ/vqkg1gEagd0iPq23n:C2jV7uikFgxV7uikFgnV7uikFgwwn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54

.exe 433KB

960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54
MD5 f5a913ca87d265739e16b6fa6a9ad1b1
SHA1 0a73e312f2c32e118c02a6b200c20728178ec751
SHA512 6e85b041bbeece397aff7781912fa63dcc57d31fdc0af97a816f9cff0befc07ea7caaaea94623e0a8fcc911c58e712ecfc8c7e2befdba65bf7dd044f970e4065
SSDEEP 6144:CRsDjVdRQ/vqkg1gEagdQH8VdRQ/vqkg1gEagdQHGVdRQ/vqkg1gEagd0iPq23n:C2jV7uikFgxV7uikFgnV7uikFgwwn
MD5 SHA1 SHA512 SSDEEP

Digest

ec:ec:9c:74:42:71:4d:f2:0c:99:a7:2e:71:41:8c:b2:85:95:df:56:68:7b:1f:d7:ac:aa:c2:96:e2:a6:a7:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

Chains

Mar 8, 2024

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

Serial Number

c8:e7:c3:58:e7:e9:fb:3c:16:ef:34:da:62:c7:d0:af

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 16, 2023 - Jun 15, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

317602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\ghisl\OneDrive\Documents\Programmation\wpf\Intelligent standby list cleaner ISLC - framework\Intelligent standby list cleaner ISLC\obj\Release\Intelligent standby list cleaner ISLC.pdb

960329d033489ecf9fb4a1ec565bb55cb83e9a42be5c6debb6d53ec8db154c54

mscoree

dotnet