042002100213_05712255[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

042002100213_05712255.exe
Size

886KB
MD5

e0ea1b80a4dd04e3f8bb54132818a180
SHA1

2e2dd147c69a14320e766a5b59da0064937b61b3
SHA256

18a9626248f02f55e129b5172bc9473741511fe4d2c088fb7c46ce12d3c8175f
SHA512

e600dd651126fa439100a1923f8854b63797da6752519019c34b4548db2e0d95e1b69599651a1139ba2c54dd7d2395737d4395827561f7787e176040a09c8523
SSDEEP

12288:hGKwtN+9qy2JkbwsGgPh3jADceuzsy0la+Qu6w3vaX/t/Mx5BuVCOZ8UZeEdp7XO:AS4yOshp38oGQ0vmt/MxUXZlw

Score

1^/10

Malware Config

Signatures

Files

042002100213_05712255.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:dc:b1:32:0b:c6:38:9a:32:60:22:c6:5f:51:bf:63:36:46:e9:87:07:85:45:8b:4b:eb:a1:f7:5b:15:df:33
Signer

Actual PE Digest

01:dc:b1:32:0b:c6:38:9a:32:60:22:c6:5f:51:bf:63:36:46:e9:87:07:85:45:8b:4b:eb:a1:f7:5b:15:df:33

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ABWB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ecCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

01:dc:b1:32:0b:c6:38:9a:32:60:22:c6:5f:51:bf:63:36:46:e9:87:07:85:45:8b:4b:eb:a1:f7:5b:15:df:33Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 691KB - Virtual size: 690KB

.rsrc Size: 173KB - Virtual size: 172KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

01:dc:b1:32:0b:c6:38:9a:32:60:22:c6:5f:51:bf:63:36:46:e9:87:07:85:45:8b:4b:eb:a1:f7:5b:15:df:33
Signer

.text
Size: 691KB - Virtual size: 690KB

.rsrc
Size: 173KB - Virtual size: 172KB

.reloc
Size: 512B - Virtual size: 12B