Contract Agreement for YouTube Partnership[.]scr

Sharing

Copy URL Twitter E-mail

General

Target

Contract Agreement for YouTube Partnership.scr
Size

1.8MB
MD5

a4e4a8801e98d9f663d8923de6475819
SHA1

3bcfb540ecf62df7b61d19c03215eb2130061f7b
SHA256

2f9a3a22aff8f16e6b390c788fe5f6e6e3c09631150f54f8235eae8945be461d
SHA512

c69641ffd33c36e565428788eda9050b57ca4677b9aa5634fdc0b7f239efd6cd078b84cff3fb28086624b129b3247b63e3ef378e6daa59b1a86249978e6e989d
SSDEEP

24576:+JEhYUt3QEuTGKptBcJ9K9izaY1gknlHcR2AHwCPXFoJ9VXTTViaIvufnXn5LQju:+e57BKj2f5gklHcuYoJn5i983pyu

Score

1^/10

Malware Config

Signatures

Files

Contract Agreement for YouTube Partnership.scr
.exe windows:4 windows x86 arch:x86

Code Sign

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=KC SOFTWARES SASU,O=KC SOFTWARES SASU,L=AUTERIVE,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:19:e8:a4:0d:b9:6c:1f:6d:7f:de:d3:55:40:77:fe:b5:1d:b7:27:9c:75:a5:fc:05:89:9f:79:93:18:26:95
Signer

Actual PE Digest

bc:19:e8:a4:0d:b9:6c:1f:6d:7f:de:d3:55:40:77:fe:b5:1d:b7:27:9c:75:a5:fc:05:89:9f:79:93:18:26:95

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 29B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

bc:19:e8:a4:0d:b9:6c:1f:6d:7f:de:d3:55:40:77:fe:b5:1d:b7:27:9c:75:a5:fc:05:89:9f:79:93:18:26:95Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 1.2MB - Virtual size: 1.2MB

DATA Size: 79KB - Virtual size: 79KB

BSS Size: - Virtual size: 12KB

.idata Size: 12KB - Virtual size: 11KB

.tls Size: - Virtual size: 29B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 83KB - Virtual size: 83KB

.rsrc Size: 408KB - Virtual size: 408KB

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bc:19:e8:a4:0d:b9:6c:1f:6d:7f:de:d3:55:40:77:fe:b5:1d:b7:27:9c:75:a5:fc:05:89:9f:79:93:18:26:95
Signer

CODE
Size: 1.2MB - Virtual size: 1.2MB

DATA
Size: 79KB - Virtual size: 79KB

BSS
Size: - Virtual size: 12KB

.idata
Size: 12KB - Virtual size: 11KB

.tls
Size: - Virtual size: 29B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 83KB - Virtual size: 83KB

.rsrc
Size: 408KB - Virtual size: 408KB