e3380ca24bff7803d134ff7bddc81223[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

e3380ca24bff7803d134ff7bddc81223.bin
Size

129KB
MD5

9a75dcb2ecce4c62ad8439c84e7b3a68
SHA1

d34ac1dd4ac44363633bd8fb7c43cf9ec5837d93
SHA256

39a1ba295445a454beb7d7e2942b67e9b107a553cc62ceb1ad819f57c4d4731a
SHA512

42b7a33d5467340bbd67498ed240f3d5907be75ae186c948dfbed8100a6d96446852f319016d281837770e73f589eb62f4b798c243f233e75f75440702008b61
SSDEEP

3072:6s3NuvbYLzmbZKpohKG3TEw8hQdLfdJ+7zNvlh3VRF4JV:qbCzdWdDEwf+7zNtBVeV

Score

1^/10

Malware Config

Signatures

Files

e3380ca24bff7803d134ff7bddc81223.bin
.zip

Password: infected
cf0cdb7290a6637aad0141025ea90332763e69bcada23eec84cf8e81faf53087.exe
.dll windows:0 windows x64 arch:x64

Password: infected

Code Sign

43:c1:0b:1c:00:00:00:00:51:d3:73:da
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:46

Not After

10/11/2030, 14:16

Subject

CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:57:28:6e:40:33:fc:b0:00:00:00:00:55:65:f5:ac
Certificate

Issuer

CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

04/03/2016, 21:46

Not After

20/03/2017, 22:16

Subject

CN=Rockstar Games\, Inc.,OU=Rockstar Games,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:1a:22:7d:fb:a1:8e:7d:18:7a:a7:92:fe:79:6f:cb:2f:f1:7a:bc:dc:d0:d0:23:8b:2f:5c:2b:6c:2f:b5:ce
Signer

Actual PE Digest

0f:1a:22:7d:fb:a1:8e:7d:18:7a:a7:92:fe:79:6f:cb:2f:f1:7a:bc:dc:d0:d0:23:8b:2f:5c:2b:6c:2f:b5:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Exports

Exports

D1DAssemble
D1DCompile
D1DCompile2
D1DCompileFromFile
D1DCompressShaders
D1DCreateBlob
D1DCreateFunctionLinkingGraph
D1DCreateLinker
D1DDecompressShaders
D1DDisassemble
D1DDisassemble10Effect
D1DDisassemble11Trace
D1DDisassembleRegion
D1DGetBlobPart
D1DGetDebugInfo
D1DGetInputAndOutputSignatureBlob
D1DGetInputSignatureBlob
D1DGetOutputSignatureBlob
D1DGetTraceInstructionOffsets
D1DLoadModule
D1DPreprocess
D1DReadFileToBlob
D1DReflect
D1DReflectLibrary
D1DReturnFailure1
D1DSetBlobPart
D1DStripShader
D1DWriteBlobToFile
D2DAssemble
D2DCompile
D2DCompile2
D2DCompileFromFile
D2DCompressShaders
D2DCreateBlob
D2DCreateFunctionLinkingGraph
D2DCreateLinker
D2DDecompressShaders
D2DDisassemble
D2DDisassemble10Effect
D2DDisassemble11Trace
D2DDisassembleRegion
D2DGetBlobPart
D2DGetDebugInfo
D2DGetInputAndOutputSignatureBlob
D2DGetInputSignatureBlob
D2DGetOutputSignatureBlob
D2DGetTraceInstructionOffsets
D2DLoadModule
D2DPreprocess
D2DReadFileToBlob
D2DReflect
D2DReflectLibrary
D2DReturnFailure1
D2DSetBlobPart
D2DStripShader
D2DWriteBlobToFile
DebugSetMute1
DebugSetMute2
IEX
SystemFunction036

Sections

.text
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Code Sign

43:c1:0b:1c:00:00:00:00:51:d3:73:daCertificate

Extended Key Usages

Key Usages

50:57:28:6e:40:33:fc:b0:00:00:00:00:55:65:f5:acCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

0f:1a:22:7d:fb:a1:8e:7d:18:7a:a7:92:fe:79:6f:cb:2f:f1:7a:bc:dc:d0:d0:23:8b:2f:5c:2b:6c:2f:b5:ceSigner

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 334KB - Virtual size: 333KB

.data Size: 56KB - Virtual size: 55KB

.reloc Size: 512B - Virtual size: 44B

43:c1:0b:1c:00:00:00:00:51:d3:73:da
Certificate

50:57:28:6e:40:33:fc:b0:00:00:00:00:55:65:f5:ac
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

0f:1a:22:7d:fb:a1:8e:7d:18:7a:a7:92:fe:79:6f:cb:2f:f1:7a:bc:dc:d0:d0:23:8b:2f:5c:2b:6c:2f:b5:ce
Signer

.text
Size: 334KB - Virtual size: 333KB

.data
Size: 56KB - Virtual size: 55KB

.reloc
Size: 512B - Virtual size: 44B