589103acebefffbe10ba8cd96e5f4e10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

589103acebefffbe10ba8cd96e5f4e10N.exe
Size

32KB
MD5

589103acebefffbe10ba8cd96e5f4e10
SHA1

3b674b0035c83b3365264e73c320d8b5eb501de0
SHA256

f56255e79ce91547f677396b93b009d7b4895d1023f1f34d6be2621aa5ae6a37
SHA512

bd4b8fd2457bef31668f0a13caf09aa05940d8cd03a983c8ea01c36158c514a6651f408f67f17c8f3406573bd35ce8139e06edd7dd99fadb2779dc4219d82650
SSDEEP

384:CIZPLu5NXUonW52Xrivq/zDQ1fM/yvLbAPtt5NHIYidvjfcTAM+o/8E9VF0NyAtr:5M1nW0iqnQFMavLsHoYi2TAMxkEIr

Score

1^/10

Malware Config

Signatures

Files

589103acebefffbe10ba8cd96e5f4e10N.exe
.dll windows:6 windows x64 arch:x64

fdf37b2e313fba0402de810a6b9cbeaf

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:72:bc:44:f5:59:f6:94:64:40:b5:8d:0a:19:21:a0
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/06/2023, 00:00

Not After

26/06/2026, 23:59

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:6a:61:0b:49:99:fe:b5:4b:4d:49:d7:57:ca:fe:1c:fd:25:af:ef:cd:d1:90:67:85:9c:90:c4:98:a8:72:c9
Signer

Actual PE Digest

b4:6a:61:0b:49:99:fe:b5:4b:4d:49:d7:57:ca:fe:1c:fd:25:af:ef:cd:d1:90:67:85:9c:90:c4:98:a8:72:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

jimage.pdb

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
ReadFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MapViewOfFileEx
UnmapViewOfFile
CreateFileMappingA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcpy
memset
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
_open
_close
_get_osfhandle

api-ms-win-crt-string-l1-1-0

strcat
strlen
strcpy
strncpy
strcmp

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
realloc
calloc
free

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

Exports

Exports

JIMAGE_Close
JIMAGE_FindResource
JIMAGE_GetResource
JIMAGE_Open
JIMAGE_PackageToModule
JIMAGE_ResourceIterator
Java_jdk_internal_jimage_NativeImageBuffer_getNativeMap

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdf37b2e313fba0402de810a6b9cbeaf

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:72:bc:44:f5:59:f6:94:64:40:b5:8d:0a:19:21:a0Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b4:6a:61:0b:49:99:fe:b5:4b:4d:49:d7:57:ca:fe:1c:fd:25:af:ef:cd:d1:90:67:85:9c:90:c4:98:a8:72:c9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 1008B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 156B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:72:bc:44:f5:59:f6:94:64:40:b5:8d:0a:19:21:a0
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b4:6a:61:0b:49:99:fe:b5:4b:4d:49:d7:57:ca:fe:1c:fd:25:af:ef:cd:d1:90:67:85:9c:90:c4:98:a8:72:c9
Signer

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 1008B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 156B