0a7a71c6c95e406a6672ce9902a9c5f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0a7a71c6c95e406a6672ce9902a9c5f0N.exe
Size

100KB
MD5

0a7a71c6c95e406a6672ce9902a9c5f0
SHA1

7d72e745f1f309c168e5b6fc44f2f9025ef464ed
SHA256

a607687ea9721157ad1cfa890e10e5a8776b008f9af0e29b0f168aacc591c2d6
SHA512

b964fc42e6918ddbfdf9f15ce5d645b57c515d3aadd015c24ea7668886e8c1a683c72f4135385a17db4bd62b401d198ad3d57a4d1f2942a11c5a4c3ed94a41a7
SSDEEP

1536:gtgrmSHP1GsArHNh/8h8qhRyjb1q1yqaenAe7C3xWxqx5wL/Cy5ixuu:Op/ORyjboybeqWxqbe/Cy5G

Score

1^/10

Malware Config

Signatures

Files

0a7a71c6c95e406a6672ce9902a9c5f0N.exe
.dll windows:6 windows x64 arch:x64

eb7a57a1147375cfda363f07786bf29a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:f3:28:98:da:18:8f:c0:a1:fe:95:d8:9e:ec:4e:fb
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

16/03/2023, 00:00

Not After

15/06/2026, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fd:79:c6:4b:9e:f9:0f:cf:60:1a:d1:92:df:67:35:4a:d8:4c:40:df
Signer

Actual PE Digest

fd:79:c6:4b:9e:f9:0f:cf:60:1a:d1:92:df:67:35:4a:d8:4c:40:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memset
__C_specific_handler
__std_type_info_destroy_list
memcpy

api-ms-win-crt-heap-l1-1-0

calloc
free

api-ms-win-crt-math-l1-1-0

sqrt

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm
_initialize_narrow_environment

Exports

Exports

Java_com_sun_pisces_AbstractSurface_disposeNative
Java_com_sun_pisces_AbstractSurface_getRGBImpl
Java_com_sun_pisces_AbstractSurface_setRGBImpl
Java_com_sun_pisces_JavaSurface_initialize
Java_com_sun_pisces_PiscesRenderer_clearRectImpl
Java_com_sun_pisces_PiscesRenderer_disposeNative
Java_com_sun_pisces_PiscesRenderer_drawImageImpl
Java_com_sun_pisces_PiscesRenderer_emitAndClearAlphaRowImpl
Java_com_sun_pisces_PiscesRenderer_fillAlphaMaskImpl
Java_com_sun_pisces_PiscesRenderer_fillLCDAlphaMaskImpl
Java_com_sun_pisces_PiscesRenderer_fillRectImpl
Java_com_sun_pisces_PiscesRenderer_initialize
Java_com_sun_pisces_PiscesRenderer_setClipImpl
Java_com_sun_pisces_PiscesRenderer_setColorImpl
Java_com_sun_pisces_PiscesRenderer_setCompositeRuleImpl
Java_com_sun_pisces_PiscesRenderer_setLCDGammaCorrectionImpl
Java_com_sun_pisces_PiscesRenderer_setLinearGradientImpl
Java_com_sun_pisces_PiscesRenderer_setRadialGradientImpl
Java_com_sun_pisces_PiscesRenderer_setTextureImpl
Java_com_sun_pisces_Transform6_initialize

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb7a57a1147375cfda363f07786bf29a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

bc:f3:28:98:da:18:8f:c0:a1:fe:95:d8:9e:ec:4e:fbCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

fd:79:c6:4b:9e:f9:0f:cf:60:1a:d1:92:df:67:35:4a:d8:4c:40:dfSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 2KB - Virtual size: 5KB

.pdata Size: 2KB - Virtual size: 1KB

_RDATA Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 512B - Virtual size: 84B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

bc:f3:28:98:da:18:8f:c0:a1:fe:95:d8:9e:ec:4e:fb
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

fd:79:c6:4b:9e:f9:0f:cf:60:1a:d1:92:df:67:35:4a:d8:4c:40:df
Signer

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 2KB - Virtual size: 5KB

.pdata
Size: 2KB - Virtual size: 1KB

_RDATA
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 84B