d02a1cf79adffbada2de9bd052e9ab83fcfcbafc240e28bcbb7ee635d9767c37[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d02a1cf79adffbada2de9bd052e9ab83fcfcbafc240e28bcbb7ee635d9767c37.exe
Size

17.3MB
MD5

44e7c619f800d157b785038698f373a3
SHA1

3b17090dd1646c1b244b3f9551d2ce30bd37f0b3
SHA256

d02a1cf79adffbada2de9bd052e9ab83fcfcbafc240e28bcbb7ee635d9767c37
SHA512

77f15cdc7c5474a1516718d8ccaa77507a1c54e7a59d0fa8107e4bd32a842b2d41731bab8e6925fee895580b54615d5faedb6489ef18aaeb973ffea63e6d6bbd
SSDEEP

393216:4FSMz+7Qkcr5uOZ33Q6dQ7iz7NquU67h7+ysg/w0Hxgye:g+hcr8E3A4QEBqP67Uy/lH+ye

Score

1^/10

Malware Config

Signatures

Files

d02a1cf79adffbada2de9bd052e9ab83fcfcbafc240e28bcbb7ee635d9767c37.exe
.exe windows:1 windows x86 arch:x86

Code Sign

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aa
Certificate

Issuer

CN=Actalis Code Signing CA G2,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Not Before

26/10/2023, 14:24

Not After

26/10/2026, 14:24

Subject

CN=EDENA S.R.L.,O=EDENA S.R.L.,L=CATANIA,ST=Catania,C=IT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0e
Certificate

Issuer

CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT

Not Before

10/03/2023, 13:01

Not After

22/09/2030, 11:22

Subject

CN=Actalis Time Stamping CA G1,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3
Certificate

Issuer

CN=Actalis Time Stamping CA G1,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Not Before

10/05/2023, 08:57

Not After

22/09/2030, 11:22

Subject

CN=Actalis Time-Stamping Authority TSU 2,OU=Time Stamping Authority,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

16:5d:69:c0:48:63:a7:0c:69:ae:9a:9a:95:b0:5a:50:7f:3f:9d:6e:55:f0:ee:35:2b:20:ac:c0:bb:6c:25:a0
Signer

Actual PE Digest

16:5d:69:c0:48:63:a7:0c:69:ae:9a:9a:95:b0:5a:50:7f:3f:9d:6e:55:f0:ee:35:2b:20:ac:c0:bb:6c:25:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aaCertificate

Extended Key Usages

Key Usages

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0eCertificate

Extended Key Usages

Key Usages

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3Certificate

Extended Key Usages

Key Usages

16:5d:69:c0:48:63:a7:0c:69:ae:9a:9a:95:b0:5a:50:7f:3f:9d:6e:55:f0:ee:35:2b:20:ac:c0:bb:6c:25:a0Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 164KB - Virtual size: 164KB

41:aa:2f:4f:f7:8f:10:d4:42:93:f5:66:9d:a4:54:aa
Certificate

16:1f:e1:2b:3a:00:2d:1e:ce:d6:14:72:50:d5:d9:0e
Certificate

6c:45:55:4d:e5:fa:06:3e:57:14:77:ff:8a:bb:c8:c3
Certificate

16:5d:69:c0:48:63:a7:0c:69:ae:9a:9a:95:b0:5a:50:7f:3f:9d:6e:55:f0:ee:35:2b:20:ac:c0:bb:6c:25:a0
Signer

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 164KB - Virtual size: 164KB