SecuriteInfo[.]com[.]FileRepMalware[.]32260[.]3753[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.FileRepMalware.32260.3753.exe
Size

23KB
MD5

7d1c50701cc6acbeb2d4a377005f4969
SHA1

4b72e3c21bf5df65ff365145a3ad3a7094aa52dc
SHA256

9e70bc07f2a3be70e879e86b1d26ad7ff5e8d5d2604260654818a600f6105de9
SHA512

771497d520fdb8712193d217a74aa387ca85b55f6e424fdcb393cead19d9142a808fecf8b9fa7a3074f83923222ba94726f0bd396c527ba9825f211ce171907b
SSDEEP

384:GGiqCsHFl7eXiZkO0uSXhWw4f9Xyfk5UiwAdBUR2w01ZIpwKNsOVvt/o3:GGix87prtvFiMGjAkMP1Z9Utg3

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.FileRepMalware.32260.3753.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

26/05/2022, 00:00

Not After

25/05/2025, 23:59

Subject

CN=Bulwark Exterminating\, LLC,O=Bulwark Exterminating\, LLC,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6c:80:d2:0a:c9:33:32:c6:0e:21:a9:0a:8b:63:2d:e5:ed:15:51:22
Signer

Actual PE Digest

6c:80:d2:0a:c9:33:32:c6:0e:21:a9:0a:8b:63:2d:e5:ed:15:51:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MichaelCC\AppData\Local\Temp\b40405a68841485b9847d7ba3ecf29a7\obj\Debug\net462\VPN Install.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8eCertificate

Extended Key Usages

Key Usages

6c:80:d2:0a:c9:33:32:c6:0e:21:a9:0a:8b:63:2d:e5:ed:15:51:22Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 10KB - Virtual size: 10KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8e
Certificate

6c:80:d2:0a:c9:33:32:c6:0e:21:a9:0a:8b:63:2d:e5:ed:15:51:22
Signer

.text
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 12B