094ac6a83d846afe4695ff57834c1ae0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

094ac6a83d846afe4695ff57834c1ae0N.exe
Size

1.9MB
MD5

094ac6a83d846afe4695ff57834c1ae0
SHA1

f45f535fca0e65a86edddaddeaa0ae25a59dbd08
SHA256

69620789921ae36c749dd57147f0ef54608d2aa3f6debfc3038f659a46bb91e7
SHA512

7438e1e07ed534243a6501dd5255607ac5c7551d46d1b1da92bc5dfaa97ef347064b16bcfacc033b00a0147e72680c499f013d7a7b7cd3113e2ea020d9f2bc70
SSDEEP

49152:RZM5HmoaMZVCrYShlXmCHMGhyjaTWIGG03yMB0g9N:R6VL+NSkjGGUU8N

Score

1^/10

Malware Config

Signatures

Files

094ac6a83d846afe4695ff57834c1ae0N.exe
.exe windows:6 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:89:74:63:6c:81:0e:c5:c8:b8:e9:bc:07:c5:d4:7a
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

11/04/2023, 00:00

Not After

10/04/2026, 23:59

Subject

CN=IBNM Co.\,Ltd.,O=IBNM Co.\,Ltd.,ST=Gyeonggi-do,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:ea:a1:e3:66:eb:26:4b:da:60:9e:c9:f6:af:a7:a1:7f:d0:6c:78
Signer

Actual PE Digest

6a:ea:a1:e3:66:eb:26:4b:da:60:9e:c9:f6:af:a7:a1:7f:d0:6c:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

Size: 1.3MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cyxruofh
Size: 641KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vrnartue
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

70:89:74:63:6c:81:0e:c5:c8:b8:e9:bc:07:c5:d4:7aCertificate

Extended Key Usages

Key Usages

6a:ea:a1:e3:66:eb:26:4b:da:60:9e:c9:f6:af:a7:a1:7f:d0:6c:78Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Exports

Exports

Sections

Size: 1.3MB - Virtual size: 3.5MB

.rsrc Size: 42KB - Virtual size: 160KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 820KB

cyxruofh Size: 641KB - Virtual size: 644KB

vrnartue Size: 512B - Virtual size: 4KB

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

70:89:74:63:6c:81:0e:c5:c8:b8:e9:bc:07:c5:d4:7a
Certificate

6a:ea:a1:e3:66:eb:26:4b:da:60:9e:c9:f6:af:a7:a1:7f:d0:6c:78
Signer

.rsrc
Size: 42KB - Virtual size: 160KB

.idata
Size: 512B - Virtual size: 4KB

cyxruofh
Size: 641KB - Virtual size: 644KB

vrnartue
Size: 512B - Virtual size: 4KB