b27e84b97955a67d4853da5484584288[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

b27e84b97955a67d4853da5484584288.bin
Size

43KB
MD5

c3a95dc6ee69701b6ecc501ad2466b7a
SHA1

99bb931c87f1445e119fca6f97d85a6062b70b20
SHA256

706059196e92396bb46cf86116ad46b89973b3c00d8da51bad96048b7705ed97
SHA512

248a7b7673ee9314e30b2bdf60d34ae05d4a02214309d6c952ec00f3970d4f2f3e5f2847b814d49964ab7ea60084f225ea181524a623016b90b47297120ed4ae
SSDEEP

768:+uzG3U3cQfvnEooWLpPnj7Ue00Ek9BnEeXuCd4ym26Xvp2gbU1lNFo524:rC3PaNPnHUe00EkvEeXlhKlbUg524

Score

1^/10

Malware Config

Signatures

Files

b27e84b97955a67d4853da5484584288.bin
.zip

Password: infected
1623799a8f3cf08ad276427682e642c926edc5fdedea42e198f60da2bd581463.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/06/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

26/05/2022, 00:00

Not After

25/05/2025, 23:59

Subject

CN=Bulwark Exterminating\, LLC,O=Bulwark Exterminating\, LLC,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b7:9a:f9:fa:82:0c:ab:19:20:53:64:b1:eb:6e:fb:44:67:1a:80:b0:de:ee:72:e7:c2:ad:4e:d2:84:5f:4f:72
Signer

Actual PE Digest

b7:9a:f9:fa:82:0c:ab:19:20:53:64:b1:eb:6e:fb:44:67:1a:80:b0:de:ee:72:e7:c2:ad:4e:d2:84:5f:4f:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MichaelCC\AppData\Local\Temp\a86fd37b5e3f489eacbfb39460fe1dd2\obj\Debug\net462\InstallSoftphone.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8eCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

b7:9a:f9:fa:82:0c:ab:19:20:53:64:b1:eb:6e:fb:44:67:1a:80:b0:de:ee:72:e7:c2:ad:4e:d2:84:5f:4f:72Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 9KB

.rsrc Size: 173KB - Virtual size: 172KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

38:97:63:9d:44:c2:ec:fd:08:ad:6b:8f:d1:84:9c:8e
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

b7:9a:f9:fa:82:0c:ab:19:20:53:64:b1:eb:6e:fb:44:67:1a:80:b0:de:ee:72:e7:c2:ad:4e:d2:84:5f:4f:72
Signer

.text
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 173KB - Virtual size: 172KB

.reloc
Size: 512B - Virtual size: 12B