9a977571296ae1548c32df94be75eec2a414798bee7064b0bf44859e886a0cfa[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

9a977571296ae1548c32df94be75eec2a414798bee7064b0bf44859e886a0cfa.exe
Size

87KB
MD5

7e0c85852b2cd932626fcf284ca72978
SHA1

c8ccf6e20cde537f3da64aebd1f80b144a4c8e0a
SHA256

9a977571296ae1548c32df94be75eec2a414798bee7064b0bf44859e886a0cfa
SHA512

04e38c62d83f963e7ba6859269f060fa8b530072cb9d816a0d5320db3f1f4a61db6f820e7ae33c212a0ff7c70aac0f4f670e26f81c1973ca8e168326e311e057
SSDEEP

768:h8JqGaVJ2wSS9KnDUyLDU8uoB/qW1cGerHyKvu1YbTgocJOsr4+9iocUf2hb:9kS9KBL1cvrHyKvu1Gsr4siDUf

Score

1^/10

Malware Config

Signatures

Files

9a977571296ae1548c32df94be75eec2a414798bee7064b0bf44859e886a0cfa.exe
.exe windows:4 windows x64 arch:x64

cd7d90d884561e880b8d39a2eaa4c342

Code Sign

73:b1:7d:4e:80:a3:fd:f5:aa:6a:f2:48:0c:46:41:8f:4c:e7:47:f4
Certificate

Issuer

CN=TrustLand Ltd. Root CA,OU=TrustLand Ltd. Root CA,O=TrustLand Ltd.,L=Europe,C=UK,0.9.2342.19200300.100.1.25=#130974727573746c616e64,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

29-11-2019 11:35

Not After

28-11-2022 11:35

Subject

CN=TrustLand Ltd. Code Signing Authority,OU=TrustLand Ltd. Code Signing Authority,O=TrustLand Ltd.

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:f3:f6:79:51:e8:8b:3e:f7:56:54:c3:06:33:72:4f:46:11:7a:76
Certificate

Issuer

CN=TrustLand Ltd. Root CA,OU=TrustLand Ltd. Root CA,O=TrustLand Ltd.,L=Europe,C=UK,0.9.2342.19200300.100.1.25=#130974727573746c616e64,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

29-11-2019 11:35

Not After

28-11-2024 11:35

Subject

CN=TrustLand Ltd. Root CA,OU=TrustLand Ltd. Root CA,O=TrustLand Ltd.,L=Europe,C=UK,0.9.2342.19200300.100.1.25=#130974727573746c616e64,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-10-2019 00:00

Not After

17-10-2030 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:8c:e3:8b:8d:52:84:2f:7a:eb:71:14:10:72:da:5d:03:88:bd:de:71:94:f4:ba:46:25:c1:b8:40:58:ee:63
Signer

Actual PE Digest

75:8c:e3:8b:8d:52:84:2f:7a:eb:71:14:10:72:da:5d:03:88:bd:de:71:94:f4:ba:46:25:c1:b8:40:58:ee:63

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
ExitProcess
FlushFileBuffers
GetDateFormatA
GetFileSize
GetLocalTime
GetModuleFileNameA
GetTimeFormatA
ReadFile
SetStdHandle
Sleep
VirtualAlloc
VirtualProtect
WriteFile

shfolder

SHGetFolderPathA

user32

CharUpperBuffA

ws2_32

WSAStartup
getaddrinfo

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd7d90d884561e880b8d39a2eaa4c342

Code Sign

73:b1:7d:4e:80:a3:fd:f5:aa:6a:f2:48:0c:46:41:8f:4c:e7:47:f4Certificate

Extended Key Usages

Key Usages

6d:f3:f6:79:51:e8:8b:3e:f7:56:54:c3:06:33:72:4f:46:11:7a:76Certificate

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

75:8c:e3:8b:8d:52:84:2f:7a:eb:71:14:10:72:da:5d:03:88:bd:de:71:94:f4:ba:46:25:c1:b8:40:58:ee:63Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shfolder

user32

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 1024B - Virtual size: 736B

.pdata Size: 512B - Virtual size: 72B

.xdata Size: 512B - Virtual size: 116B

.idata Size: 1024B - Virtual size: 864B

.rsrc Size: 67KB - Virtual size: 66KB

73:b1:7d:4e:80:a3:fd:f5:aa:6a:f2:48:0c:46:41:8f:4c:e7:47:f4
Certificate

6d:f3:f6:79:51:e8:8b:3e:f7:56:54:c3:06:33:72:4f:46:11:7a:76
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

75:8c:e3:8b:8d:52:84:2f:7a:eb:71:14:10:72:da:5d:03:88:bd:de:71:94:f4:ba:46:25:c1:b8:40:58:ee:63
Signer

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 1024B - Virtual size: 736B

.pdata
Size: 512B - Virtual size: 72B

.xdata
Size: 512B - Virtual size: 116B

.idata
Size: 1024B - Virtual size: 864B

.rsrc
Size: 67KB - Virtual size: 66KB