2midi[.]exe | Triage

Resubmissions

11-08-2024 22:23

240811-2atgpswckc 1

11-08-2024 22:21

240811-19sh1s1fnn 1

Sharing

Copy URL

Twitter E-mail

General

Target

2midi.exe
Size

253KB
MD5

d9c926b7230b9b9267d533a08982871f
SHA1

43b6b67b47564c35b0d2a83e2ca06c9f1510597c
SHA256

cffb7d80777fe1189cd879104d5da3e81acd6338f462ed4c034051dd8e1fe02b
SHA512

b2f47eef7c22ba06bf412c74db1157e5f87d9ab41b081f1b308431905b49f009d67d3792cd5b8a6be97551de548114f6a2766c567290cdf556d85a9ec762f804
SSDEEP

6144:F10Bn8p51TfcLc8mBzgT+bYWQOiMVfvOs9ZiN9eE:F10Bs1DaH+bYGRV3OCUn

Score

1^/10

Malware Config

Signatures

Files

2midi.exe
.exe windows:4 windows x86 arch:x86

Code Sign

44:f2:4b:dd:e5:36:80:9b:78:e9:0a:6f:55:46:d2:ec
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

17-01-2023 15:07

Not After

16-01-2026 15:07

Subject

CN=Un4seen Developments Ltd,O=Un4seen Developments Ltd,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24-06-2016 20:44

Not After

24-06-2031 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

34:59:3a:42:45:fa:8f:6f:23:23:5f:5c:ed:74:9e:c5:0e:ef:a9:c5
Signer

Actual PE Digest

34:59:3a:42:45:fa:8f:6f:23:23:5f:5c:ed:74:9e:c5:0e:ef:a9:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

2midi.pdb

Sections

Size: 72KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 623B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Code Sign

44:f2:4b:dd:e5:36:80:9b:78:e9:0a:6f:55:46:d2:ecCertificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

34:59:3a:42:45:fa:8f:6f:23:23:5f:5c:ed:74:9e:c5:0e:ef:a9:c5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

Size: 72KB - Virtual size: 528KB

.rsrc Size: 173KB - Virtual size: 376KB

petite Size: 623B - Virtual size: 623B

44:f2:4b:dd:e5:36:80:9b:78:e9:0a:6f:55:46:d2:ec
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

34:59:3a:42:45:fa:8f:6f:23:23:5f:5c:ed:74:9e:c5:0e:ef:a9:c5
Signer

.rsrc
Size: 173KB - Virtual size: 376KB

petite
Size: 623B - Virtual size: 623B