6bfa28881bf19b4956471991ef8a516b836db121b0ff370515cb56ff8d716fd8

Sharing

Copy URL

Twitter E-mail

General

Target

6bfa28881bf19b4956471991ef8a516b836db121b0ff370515cb56ff8d716fd8
Size

654KB
MD5

bb542d63c1e1e4e2c989642f924d2ea3
SHA1

97a9e2ec355b8799d67cacae4e5e2ea744090afb
SHA256

6bfa28881bf19b4956471991ef8a516b836db121b0ff370515cb56ff8d716fd8
SHA512

27a5f66c24e5145dc43c646fa7c846111d91a128940c657ceaaf9b3577c87045324d3183b2a0a6b1555223a1dee5ca9da7de50544cd91cb82fe8597566cdfb75
SSDEEP

12288:gMflvNKAQv514oRiIEG1hviI86H1XzcQEEkUpd/eUJiBfirTf:Nflvk/v5Vsghk6H1XzAUD/LzrTf

Score

1^/10

Malware Config

Signatures

Files

6bfa28881bf19b4956471991ef8a516b836db121b0ff370515cb56ff8d716fd8
.exe windows:4 windows x64 arch:x64

Code Sign

18:d0:91:88:50:cb:79:c0:26:9d:29:52:b4:b6:62:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-04-2024 08:44

Not After

08-04-2025 08:44

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:98:78:df:52:14:a0:08:ba:1d:23:64:74:ac:76:ca:54:14:53:c8:73:3e:83:95:8e:a3:ec:77:37:e7:86:f2
Signer

Actual PE Digest

e2:98:78:df:52:14:a0:08:ba:1d:23:64:74:ac:76:ca:54:14:53:c8:73:3e:83:95:8e:a3:ec:77:37:e7:86:f2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

18:d0:91:88:50:cb:79:c0:26:9d:29:52:b4:b6:62:d0Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

e2:98:78:df:52:14:a0:08:ba:1d:23:64:74:ac:76:ca:54:14:53:c8:73:3e:83:95:8e:a3:ec:77:37:e7:86:f2Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 37KB - Virtual size: 37KB

.rsrc Size: 28KB - Virtual size: 27KB

18:d0:91:88:50:cb:79:c0:26:9d:29:52:b4:b6:62:d0
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

e2:98:78:df:52:14:a0:08:ba:1d:23:64:74:ac:76:ca:54:14:53:c8:73:3e:83:95:8e:a3:ec:77:37:e7:86:f2
Signer

.text
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 28KB - Virtual size: 27KB