installer-x64[.]exe[.]vir

Sharing

Copy URL

Twitter E-mail

General

Target

installer-x64.exe.vir
Size

1.6MB
MD5

cb6a5614bdeb19314adf32efe5c03bba
SHA1

8e15c45a561d2c806f16b035b86f0e8ea0fce686
SHA256

394604bc4d68be7608bb6d0a9189d864ad83c6e6b13183131d27cd9d73a721c2
SHA512

ca922094d6128b9d51959bab664b84795986cd55e824dc33fc19297acb54edbb716e039f6e1149fefbdd900ea363f57da6a4018592af15b68b87eb3ba74df5e0
SSDEEP

24576:dB/2VURbbHgUbpoooooooooooooooooooooooooooooooooooooooooooo/:duU3HFR

Score

1^/10

Malware Config

Signatures

Files

installer-x64.exe.vir
.exe .ps1 windows:4 windows x64 arch:x64 polyglot

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:e3:86:32:e9:fb:3c:60:cd:21:b1:3d:da:e6:5a:ad
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

08/05/2024, 00:00

Not After

07/05/2025, 23:59

Subject

SERIALNUMBER=780727-9,CN=Ameri Mode Inc.,O=Ameri Mode Inc.,L=Montreal,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:8b:3a:c1:bd:00:a1:cf:d3:c3:66:40:d1:26:1a:3e:3d:d4:7c:2d:ab:4b:84:fc:8d:ef:54:6a:61:60:e1:46
Signer

Actual PE Digest

fe:8b:3a:c1:bd:00:a1:cf:d3:c3:66:40:d1:26:1a:3e:3d:d4:7c:2d:ab:4b:84:fc:8d:ef:54:6a:61:60:e1:46

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 305.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:e3:86:32:e9:fb:3c:60:cd:21:b1:3d:da:e6:5a:adCertificate

Extended Key Usages

Key Usages

fe:8b:3a:c1:bd:00:a1:cf:d3:c3:66:40:d1:26:1a:3e:3d:d4:7c:2d:ab:4b:84:fc:8d:ef:54:6a:61:60:e1:46Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 347KB - Virtual size: 347KB

.rsrc Size: 1.2MB - Virtual size: 305.1MB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:e3:86:32:e9:fb:3c:60:cd:21:b1:3d:da:e6:5a:ad
Certificate

fe:8b:3a:c1:bd:00:a1:cf:d3:c3:66:40:d1:26:1a:3e:3d:d4:7c:2d:ab:4b:84:fc:8d:ef:54:6a:61:60:e1:46
Signer

.text
Size: 347KB - Virtual size: 347KB

.rsrc
Size: 1.2MB - Virtual size: 305.1MB