cdfa537f7680218487e535467e4297cd37a41afd7cfc36eab22f3ac719d3a28d

Sharing

Copy URL

Twitter E-mail

General

Target

cdfa537f7680218487e535467e4297cd37a41afd7cfc36eab22f3ac719d3a28d
Size

26KB
MD5

7ed147331745e603ebcdfa2cdf1a8936
SHA1

08c5db4466c97dddc9df29dc503cf289f82842df
SHA256

cdfa537f7680218487e535467e4297cd37a41afd7cfc36eab22f3ac719d3a28d
SHA512

4d929c535d3f1eaa72a5dc5541d77b04e31fa555f8bf409b2f37182d182b592d288c523204eccbb2fbabd40513e4762e9063985ddd258166e7cccd019e1a40eb
SSDEEP

384:bK+xKfzQ2XFpOQGR9zos2clAKLHRN74u56/R9zZwu99g5F4X:W+xAUiXOQ69zbjlAAX5e9zH

Score

1^/10

Malware Config

Signatures

Files

cdfa537f7680218487e535467e4297cd37a41afd7cfc36eab22f3ac719d3a28d
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:25

Not After

01-09-2022 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3
Signer

Actual PE Digest

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3

Digest Algorithm

sha256

PE Digest Matches

false

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3
Signer

Actual PE Digest

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3Signer

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3Signer

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ntdll

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3
Signer

7e:49:21:e3:15:c8:5e:a0:b4:80:f4:30:9d:06:97:63:bd:1a:12:4b:90:e4:b5:21:2e:b4:10:cc:73:3b:8a:c3
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB