b0a91379e7e58d5ef47da2e92d9ecb62d82eee8221ea5ebe28b28957750074ba[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

b0a91379e7e58d5ef47da2e92d9ecb62d82eee8221ea5ebe28b28957750074ba.exe
Size

6.4MB
MD5

866ffc681f70ead4e6f0a2bff3848a8c
SHA1

afeb914e36a04ad1cf4e7f777c243aed2682309b
SHA256

b0a91379e7e58d5ef47da2e92d9ecb62d82eee8221ea5ebe28b28957750074ba
SHA512

81f7f144d2e4e78e196268b3ea83825ef02c2ce7ac9caf44309445b10e1ca03656f00ad23cf8994215e1f1528a383b1a6840273ace77afab08390900ceb6af1a
SSDEEP

196608:+iSf/jWyORA9ofCJPlUotI/m/07n13/CtKd6B:+/RORJ6JPlUd+8713/CtW6B

Score

1^/10

Malware Config

Signatures

Files

b0a91379e7e58d5ef47da2e92d9ecb62d82eee8221ea5ebe28b28957750074ba.exe
.exe windows:5 windows x64 arch:x64

c63a49ce3dfcc2842a5147e20f41746c

Code Sign

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:cf:bc:8b:bb:dc:4a:ce:e2:0a:b3:8d:1b:ff:9e:fa
Certificate

Issuer

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

12-10-2023 00:00

Not After

22-10-2024 23:59

Subject

SERIALNUMBER=A03122173,CN=CYPE Ingenieros S.A.,O=CYPE Ingenieros S.A.,L=Alicante,ST=Alicante,C=ES,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1308416c6963616e7465,1.3.6.1.4.1.311.60.2.1.3=#13024553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
GetCurrentThread
CloseHandle
SetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleA
GetSystemDirectoryW
WaitForSingleObject
CreateFileW
GetSystemWindowsDirectoryW
LocalAlloc
GetProcAddress
FreeLibrary
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c63a49ce3dfcc2842a5147e20f41746c

Code Sign

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29Certificate

Extended Key Usages

Key Usages

0d:cf:bc:8b:bb:dc:4a:ce:e2:0a:b3:8d:1b:ff:9e:faCertificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 172KB - Virtual size: 175KB

.pdata Size: 1024B - Virtual size: 684B

.rsrc Size: 177KB - Virtual size: 176KB

.reloc Size: 1024B - Virtual size: 744B

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

0d:cf:bc:8b:bb:dc:4a:ce:e2:0a:b3:8d:1b:ff:9e:fa
Certificate

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 172KB - Virtual size: 175KB

.pdata
Size: 1024B - Virtual size: 684B

.rsrc
Size: 177KB - Virtual size: 176KB

.reloc
Size: 1024B - Virtual size: 744B