2a2d9fd6d51ab69936890560d7d098084a0dd4042c88bd8a7a2f348acc652705

Sharing

Copy URL Twitter E-mail

General

Target

2a2d9fd6d51ab69936890560d7d098084a0dd4042c88bd8a7a2f348acc652705
Size

24KB
MD5

1eb216dd890371708dbc76510a5d145b
SHA1

3a2df9552f2af0b1356cd389896617d983542c81
SHA256

2a2d9fd6d51ab69936890560d7d098084a0dd4042c88bd8a7a2f348acc652705
SHA512

9a22b266a6631e73e4b15abf1b5ac2c9cfebaa903d8649a7569d1ebad64e93aafaeb2667e081e20eb605e4eeba9893c103ea7486ec4fb4bdf256c809c1211cd3
SSDEEP

384:B3EgjBWW6Y5dPG7mWCRPRer6UuS+JOT/w+qSFoaHbmX9P69O+va4pKpwKNsqlcmr:B0gjp9JRHggOraaHbOCr/jmr

Score

1^/10

Malware Config

Signatures

Files

2a2d9fd6d51ab69936890560d7d098084a0dd4042c88bd8a7a2f348acc652705
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:fb:a0:86:87:52:86:26:e2:8a:31:ae:fb:16:99:92
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

08/10/2021, 00:00

Not After

07/10/2024, 23:59

Subject

CN=Fidelity National Information Services,O=Fidelity National Information Services,ST=Florida,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f9:5a:15:8f:a5:47:a2:df:8b:7c:68:a2:04:36:c3:ed:26:64:20:d8
Signer

Actual PE Digest

f9:5a:15:8f:a5:47:a2:df:8b:7c:68:a2:04:36:c3:ed:26:64:20:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

4d:fb:a0:86:87:52:86:26:e2:8a:31:ae:fb:16:99:92Certificate

Extended Key Usages

Key Usages

f9:5a:15:8f:a5:47:a2:df:8b:7c:68:a2:04:36:c3:ed:26:64:20:d8Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 15KB - Virtual size: 14KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

4d:fb:a0:86:87:52:86:26:e2:8a:31:ae:fb:16:99:92
Certificate

f9:5a:15:8f:a5:47:a2:df:8b:7c:68:a2:04:36:c3:ed:26:64:20:d8
Signer

.text
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B