e106d8bc526d56580e17d1ccee8dab73ce808f10e30e89a53b03c8b783990a20

Sharing

Copy URL

Twitter E-mail

General

Target

e106d8bc526d56580e17d1ccee8dab73ce808f10e30e89a53b03c8b783990a20
Size

25KB
MD5

4cdeb433c74c5f0c4c39b1acbb5da210
SHA1

e8b692733c8e215f4e10598bb1a23573236a006b
SHA256

e106d8bc526d56580e17d1ccee8dab73ce808f10e30e89a53b03c8b783990a20
SHA512

eac2e6f18098a1019360b14ee8f620d45ed3e17a9804bdab191470183e933667bc300235fc75676a92825e824cddbb6002ebd42068baf26c56c1abfcb9770f42
SSDEEP

384:bK+xKfzQ2XFpOQGR9zos2clAKLHRN74u56/R9zZwu99g5Fg:W+xAUiXOQ69zbjlAAX5e9zX

Score

1^/10

Malware Config

Signatures

Files

e106d8bc526d56580e17d1ccee8dab73ce808f10e30e89a53b03c8b783990a20
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:25

Not After

01-09-2022 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd
Signer

Actual PE Digest

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd

Digest Algorithm

sha256

PE Digest Matches

false

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd
Signer

Actual PE Digest

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:ddSigner

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:ddSigner

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ntdll

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd
Signer

f6:b1:14:d2:83:6b:9b:4a:79:97:22:88:bc:2d:ba:0b:35:0c:83:30:5f:5e:ff:9f:3a:4f:a4:51:53:81:f5:dd
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB