f513e98f1ae9edbcfdb27318260eab1d9d03feb4179574674086ef532efa34fb

Sharing

Copy URL Twitter E-mail

General

Target

f513e98f1ae9edbcfdb27318260eab1d9d03feb4179574674086ef532efa34fb
Size

72KB
MD5

7f72b9fe8602b4a202ec10eba8f73502
SHA1

10dc84addff71047901d9ccd262763874b3340cc
SHA256

f513e98f1ae9edbcfdb27318260eab1d9d03feb4179574674086ef532efa34fb
SHA512

2a731378c1a7844e3495f0c5b4d82026e41cef92f80db4f7eade590e78a877284369c4ef2695837eebcc38a4b9d5ec3be99608a7f5d2ef018fb283bdf458f653
SSDEEP

1536:U13zpA/dZ/xe72uXfxPY4rS947b/OGA7fxJz7DexR:U13zpOdpxe7VFPrS947b/OGA7f6

Score

1^/10

Malware Config

Signatures

Files

f513e98f1ae9edbcfdb27318260eab1d9d03feb4179574674086ef532efa34fb
.dll windows:6 windows x86 arch:x86

ac6d21b99651a97b7c590f94be450986

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

30/12/2022, 00:00

Not After

10/02/2026, 23:59

Subject

CN=Cisco WebEx LLC,OU=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

30/12/2022, 00:00

Not After

10/02/2026, 23:59

Subject

CN=Cisco WebEx LLC,OU=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:76:3e:da:09:80:11:d0:77:09:33:6d:d0:03:d9:69:fd:08:43:e0:79:bd:9c:cb:ec:7f:8f:15:f9:0b:1b:47
Signer

Actual PE Digest

b6:76:3e:da:09:80:11:d0:77:09:33:6d:d0:03:d9:69:fd:08:43:e0:79:bd:9c:cb:ec:7f:8f:15:f9:0b:1b:47

Digest Algorithm

sha256

PE Digest Matches

true

e6:38:f3:06:54:f5:f0:a7:bc:f7:e3:4c:b4:36:89:5d:54:fd:0d:dc
Signer

Actual PE Digest

e6:38:f3:06:54:f5:f0:a7:bc:f7:e3:4c:b4:36:89:5d:54:fd:0d:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

O:\webex-player\output\maps\release\nbras.pdb

Imports

wbxbase

??6WBXDataStream@@QAEAAV0@E@Z
??6WBXDataStream@@QAEAAV0@G@Z
??6WBXDataStream@@QAEAAV0@K@Z
??5WBXDataStream@@QAEAAV0@AAG@Z
??0WBXMemoryInputStream@@QAE@PBXK@Z
??5WBXDataStream@@QAEAAV0@AAI@Z
??5WBXDataStream@@QAEAAV0@AAK@Z
??6WBXDataStream@@QAEAAV0@I@Z
??5WBXDataStream@@QAEAAV0@AAE@Z
?Write8@WBXDataStream@@QAEXPBEK@Z
?Read8@WBXDataStream@@QAEXPAEK@Z
?Read32@WBXDataStream@@QAEKXZ
?IsOk@WBXDataStream@@QAEHXZ
??1WBXDataStream@@QAE@XZ
??0WBXDataStream@@QAE@AAVWBXOutputStream@@@Z
??0WBXDataStream@@QAE@AAVWBXInputStream@@@Z
??1WBXMemoryOutputStream@@UAE@XZ
??0WBXMemoryOutputStream@@QAE@PAXK@Z
??1WBXMemoryInputStream@@UAE@XZ

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryW
lstrcpynW
IsBadReadPtr
lstrlenW
lstrcatW
GetModuleHandleW
VirtualQuery
GetProcAddress
GetCurrentThreadId
FreeLibrary
GetModuleFileNameW

user32

RedrawWindow

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__CxxFrameHandler3
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memset
_except_handler4_common
__std_exception_copy
_purecall
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_errno
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_initterm
_initterm_e
_initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

wcscpy_s
wcsncpy_s
wcslen

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s
_wmakepath_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

NBRDeleteInstance
NBRInitCCInterface
NBRNewInstance

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac6d21b99651a97b7c590f94be450986

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b6:76:3e:da:09:80:11:d0:77:09:33:6d:d0:03:d9:69:fd:08:43:e0:79:bd:9c:cb:ec:7f:8f:15:f9:0b:1b:47Signer

e6:38:f3:06:54:f5:f0:a7:bc:f7:e3:4c:b4:36:89:5d:54:fd:0d:dcSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wbxbase

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:f9:c5:3f:49:40:a1:00:7e:cd:82:cf:f2:40:0d:70
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b6:76:3e:da:09:80:11:d0:77:09:33:6d:d0:03:d9:69:fd:08:43:e0:79:bd:9c:cb:ec:7f:8f:15:f9:0b:1b:47
Signer

e6:38:f3:06:54:f5:f0:a7:bc:f7:e3:4c:b4:36:89:5d:54:fd:0d:dc
Signer

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB