ffba8b707a41e50d21473be439584b6c2fc51ec16a9a15921d4a806e64e40b14

Sharing

Copy URL Twitter E-mail

General

Target

ffba8b707a41e50d21473be439584b6c2fc51ec16a9a15921d4a806e64e40b14
Size

4.0MB
MD5

75d8097b47bfa9e021c71b4a34f80b91
SHA1

a2b77ab427f863364717997ecbf2d98c21958b0f
SHA256

ffba8b707a41e50d21473be439584b6c2fc51ec16a9a15921d4a806e64e40b14
SHA512

43f41e583fe3d0ea4a97a51f12df03d78d119c8a7d78d52cd73ce421fa21f0e7fd3bcc262bc4ab5b843fcd978d73df0b6251242467d4fc64fcc5ce238b9d6966
SSDEEP

98304:OY2n0MECzS1xNeXm66x8nwu55GqiMNR2FIW5fQ6IkPeFYUVmqmHlOBBVz2SbKwEt:r2PEg4NeXmTx8nwurrR2/Otuqm+bKw0P

Score

1^/10

Malware Config

Signatures

Files

ffba8b707a41e50d21473be439584b6c2fc51ec16a9a15921d4a806e64e40b14
.exe windows:6 windows x86 arch:x86

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e
Signer

Actual PE Digest

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e

Digest Algorithm

sha256

PE Digest Matches

false

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e
Signer

Actual PE Digest

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

��0
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��1
Size: 3.8MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7eSigner

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7eSigner

Headers

DLL Characteristics

File Characteristics

Sections

���0 Size: - Virtual size: 620KB

���1 Size: 3.8MB - Virtual size: 3.9MB

���2 Size: 512B - Virtual size: 4KB

.rsrc Size: 165KB - Virtual size: 165KB

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e
Signer

c1:c1:99:48:bd:c9:4d:66:cd:8a:db:98:a3:bc:4d:7f:91:fe:f3:d6:20:63:6f:28:6d:01:a1:c0:2b:ad:47:7e
Signer

��0
Size: - Virtual size: 620KB

��1
Size: 3.8MB - Virtual size: 3.9MB

��2
Size: 512B - Virtual size: 4KB

.rsrc
Size: 165KB - Virtual size: 165KB