02151e829c73a453712bc22c07ef1ab0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

02151e829c73a453712bc22c07ef1ab0N.exe
Size

90KB
MD5

02151e829c73a453712bc22c07ef1ab0
SHA1

3cfa8a9e2df9ed9efc39b983099eaaa5672f2962
SHA256

5b3d341a35bb014ea278064ac11de1db5efaf1d1e11376000f1439286ec72b7c
SHA512

59409bbe8b5b3a43d6bc502f9d2d0f5639a2b50358473f0414f00653ce11a696fc278b9329f5f0ab65defca0fa53ce327e09aeb5b824ef80037bc4cb95e27b2b
SSDEEP

1536:F4Xm0KD49p7B8vri9UX0X8oX03ZY5LUDuXfAw3RlePlEDyWHci+nouy8QU3h1p7O:F4W0KMrKri9UX0X8Z365LUqXYwBleqlx

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

02151e829c73a453712bc22c07ef1ab0N.exe
.dll windows:5 windows x86 arch:x86

Code Sign

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/02/2020, 00:00

Not After

03/03/2023, 12:00

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/01/2023, 00:00

Not After

03/03/2026, 23:59

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Signer

Actual PE Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digest Matches

true

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Signer

Actual PE Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Extract
ExtractWithCallback
ExtractWithDetails

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1bSigner

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1bSigner

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 132KB

UPX1 Size: 73KB - Virtual size: 76KB

.rsrc Size: 1KB - Virtual size: 4KB

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Signer

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Signer

UPX0
Size: - Virtual size: 132KB

UPX1
Size: 73KB - Virtual size: 76KB

.rsrc
Size: 1KB - Virtual size: 4KB