40003d01db9c34da73a415792dba3a617fab65e91d2aae7bbbcd335af198a66b

Sharing

Copy URL

Twitter E-mail

General

Target

40003d01db9c34da73a415792dba3a617fab65e91d2aae7bbbcd335af198a66b
Size

7.2MB
MD5

9606143c857bbfe1b1da8e3d1fa9ae0e
SHA1

cb3a1b1d8e6acbe46c96b5b159a7be2d372b3cc6
SHA256

40003d01db9c34da73a415792dba3a617fab65e91d2aae7bbbcd335af198a66b
SHA512

2e118c618265b8769b15dff8add661c60f17afd46365773ca22e359b03a765c83a7f316057045293a71b53a889771fadf54e6ac1ee3fd9b3a7437f266f8af08b
SSDEEP

196608:jeuNPzUCugRPeW7R9dGfqEjirb49GOD2MpkB:CmZB77R9d0q1A9GLM

Score

1^/10

Malware Config

Signatures

Files

40003d01db9c34da73a415792dba3a617fab65e91d2aae7bbbcd335af198a66b
.exe windows:6 windows x86 arch:x86

7007929576eec286d477c8effcb4eaef

Code Sign

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06-04-2021 00:00

Not After

05-04-2024 23:59

Subject

CN=KC SOFTWARES SASU,O=KC SOFTWARES SASU,L=AUTERIVE,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:fa:9f:f8:15:51:4f:02:1d:f0:ae:14:52:2d:7b:55:2a:ae:79:d6:84:1e:d4:9a:4f:af:f8:a2:5c:60:b0:70
Signer

Actual PE Digest

65:fa:9f:f8:15:51:4f:02:1d:f0:ae:14:52:2d:7b:55:2a:ae:79:d6:84:1e:d4:9a:4f:af:f8:a2:5c:60:b0:70

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.text
Size: - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gegofon
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: - Virtual size: 248B

.7PS
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4^x
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|dA
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7007929576eec286d477c8effcb4eaef

Code Sign

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

65:fa:9f:f8:15:51:4f:02:1d:f0:ae:14:52:2d:7b:55:2a:ae:79:d6:84:1e:d4:9a:4f:af:f8:a2:5c:60:b0:70Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: - Virtual size: 254KB

.rdata Size: - Virtual size: 63KB

.data Size: - Virtual size: 8KB

.00cfg Size: - Virtual size: 8B

.gegofon Size: - Virtual size: 43KB

.voltbl Size: - Virtual size: 248B

.7PS Size: - Virtual size: 3.1MB

.4^x Size: 1024B - Virtual size: 728B

.|dA Size: 7.0MB - Virtual size: 7.0MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 16KB

28:ab:01:a5:fe:68:ad:f3:59:ae:7f:90:0e:a4:f3:94
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

65:fa:9f:f8:15:51:4f:02:1d:f0:ae:14:52:2d:7b:55:2a:ae:79:d6:84:1e:d4:9a:4f:af:f8:a2:5c:60:b0:70
Signer

.text
Size: - Virtual size: 254KB

.rdata
Size: - Virtual size: 63KB

.data
Size: - Virtual size: 8KB

.00cfg
Size: - Virtual size: 8B

.gegofon
Size: - Virtual size: 43KB

.voltbl
Size: - Virtual size: 248B

.7PS
Size: - Virtual size: 3.1MB

.4^x
Size: 1024B - Virtual size: 728B

.|dA
Size: 7.0MB - Virtual size: 7.0MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB