5fcf51d8f789ac7b52a3a3c8a134663483710fcde461ed101e87708282b673fb

Sharing

Copy URL Twitter E-mail

General

Target

5fcf51d8f789ac7b52a3a3c8a134663483710fcde461ed101e87708282b673fb
Size

639KB
MD5

fa20ff9c5380516b8755de1b2ab0b15e
SHA1

3ebbea075575853586c51f27e642c79a0b148e87
SHA256

5fcf51d8f789ac7b52a3a3c8a134663483710fcde461ed101e87708282b673fb
SHA512

8fda98c8d33586f2753cb072ddadb0ed7ea83c9e1139c51d348896b164bc7d8f60f25499fd07b8b72b30eb1f0681672571bb734aebd4fad7bf7314159632849a
SSDEEP

12288:wp3W8nlD63T8RxdBEmARYNMZgx0+uk87cIxbeJm5h/+wCpb3/Tpqzuv+ENLn0:wRW8VBpDARYqZ20+ur7hKm5J+Dp/Fku2

Score

1^/10

Malware Config

Signatures

Files

5fcf51d8f789ac7b52a3a3c8a134663483710fcde461ed101e87708282b673fb
.exe windows:4 windows x64 arch:x64

Code Sign

02:6f:cb:8e:e5:24:cb:fc:b7:06:67:d2:49:41:47:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/06/2024, 09:28

Not After

08/06/2025, 09:28

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:31:7a:84:1c:aa:c1:41:24:fa:2f:b5:a7:fb:fe:7d:b7:b9:07:cb:7b:c7:d8:72:4d:01:26:3d:93:38:38:bf
Signer

Actual PE Digest

ee:31:7a:84:1c:aa:c1:41:24:fa:2f:b5:a7:fb:fe:7d:b7:b9:07:cb:7b:c7:d8:72:4d:01:26:3d:93:38:38:bf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

02:6f:cb:8e:e5:24:cb:fc:b7:06:67:d2:49:41:47:0fCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ee:31:7a:84:1c:aa:c1:41:24:fa:2f:b5:a7:fb:fe:7d:b7:b9:07:cb:7b:c7:d8:72:4d:01:26:3d:93:38:38:bfSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 616KB - Virtual size: 615KB

.rsrc Size: 17KB - Virtual size: 16KB

02:6f:cb:8e:e5:24:cb:fc:b7:06:67:d2:49:41:47:0f
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ee:31:7a:84:1c:aa:c1:41:24:fa:2f:b5:a7:fb:fe:7d:b7:b9:07:cb:7b:c7:d8:72:4d:01:26:3d:93:38:38:bf
Signer

.text
Size: 616KB - Virtual size: 615KB

.rsrc
Size: 17KB - Virtual size: 16KB