6616fc6c4997e3dcbe16b772a908eab54d35a18812e7bd22a189c03e75bc4b81

Sharing

Copy URL Twitter E-mail

General

Target

6616fc6c4997e3dcbe16b772a908eab54d35a18812e7bd22a189c03e75bc4b81
Size

332KB
MD5

47744ce7eeb5d1becc434f477a29181a
SHA1

70fcdb852088188dd9cc5d487ad76d8e4dad3310
SHA256

6616fc6c4997e3dcbe16b772a908eab54d35a18812e7bd22a189c03e75bc4b81
SHA512

5a6e2dae5d99aeeeea548aa83e600ec676c1054ae2e956b7d75d7e6b56e654d515514d8b423c14e0a0fe56c172c680f75d25573d77d828e6f51776daba787d27
SSDEEP

3072:6T+pjkU3SE5guRROITLT6z0/a3m14T8IH2NKr1X0PNafwt180n2xmVxsYgh:w+tVOz0yHT8yeafwt18pm7M

Score

1^/10

Malware Config

Signatures

Files

6616fc6c4997e3dcbe16b772a908eab54d35a18812e7bd22a189c03e75bc4b81
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

26:fa:ee:35:22:78:29:9b:2e:80:e1:e8:b0:1b:92:a2:32:fe:f6:4c
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

21/08/2020, 15:38

Not After

21/09/2020, 15:38

Subject

CN=dr mbs,C=UK,1.2.840.113549.1.9.1=#0c0f676f6e647940616c6c6f772e726564

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:6e:4e:f9:aa:f4:4a:6c:95:fe:d1:b6:f3:d5:e0:88:96:28:ee:81:fb:92:e9:ff:46:62:fc:3f:f3:d3:47:19
Signer

Actual PE Digest

a0:6e:4e:f9:aa:f4:4a:6c:95:fe:d1:b6:f3:d5:e0:88:96:28:ee:81:fb:92:e9:ff:46:62:fc:3f:f3:d3:47:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

26:fa:ee:35:22:78:29:9b:2e:80:e1:e8:b0:1b:92:a2:32:fe:f6:4cCertificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

a0:6e:4e:f9:aa:f4:4a:6c:95:fe:d1:b6:f3:d5:e0:88:96:28:ee:81:fb:92:e9:ff:46:62:fc:3f:f3:d3:47:19Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 159KB - Virtual size: 159KB

.rsrc Size: 163KB - Virtual size: 163KB

.reloc Size: 512B - Virtual size: 12B

26:fa:ee:35:22:78:29:9b:2e:80:e1:e8:b0:1b:92:a2:32:fe:f6:4c
Certificate

e6
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

a0:6e:4e:f9:aa:f4:4a:6c:95:fe:d1:b6:f3:d5:e0:88:96:28:ee:81:fb:92:e9:ff:46:62:fc:3f:f3:d3:47:19
Signer

.text
Size: 159KB - Virtual size: 159KB

.rsrc
Size: 163KB - Virtual size: 163KB

.reloc
Size: 512B - Virtual size: 12B