d57eca9d3cf6374412e9d4751cfb9b70N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d57eca9d3cf6374412e9d4751cfb9b70N.exe
Size

132KB
MD5

d57eca9d3cf6374412e9d4751cfb9b70
SHA1

9a78ba991a5c6b1be42c7e070b4d57bf4f77df2f
SHA256

4ec3de01a6ad3b35d1b82a17db2be37e3d46ece9b48f84f0ee8618b959a52d1c
SHA512

134b87ff586a2cc36cb8e58043c0012750447401728cd0ea0868333fca689e855eed0b6f1bb2f65533543769bc05e851e5df0a628538a02d45851c41d71a3864
SSDEEP

3072:uX2tcDKO3VJJnjhrKhTK6LVQIjQqs77ne7EJW:82tcDD3WaG

Score

1^/10

Malware Config

Signatures

Files

d57eca9d3cf6374412e9d4751cfb9b70N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

05/04/2024, 00:00

Not After

04/04/2025, 23:59

Subject

SERIALNUMBER=3091871,CN=Freedom Scientific Inc.,O=Freedom Scientific Inc.,L=Clearwater,ST=Florida,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:9f:41:8c:ef:8c:66:d3:99:d1:15:29:32:ce:6f:41:82:76:17:d6:b5:a8:3e:b5:93:6c:1c:92:ac:77:62:c4
Signer

Actual PE Digest

65:9f:41:8c:ef:8c:66:d3:99:d1:15:29:32:ce:6f:41:82:76:17:d6:b5:a8:3e:b5:93:6c:1c:92:ac:77:62:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GoAgent\pipelines\ZoomText2024_R4_Package\SHARED\SetupSDK\main\public\source\WixBurnSetup\Managed\ManagedSetupUI\obj\Release\x86\ManagedSetupUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54Certificate

Extended Key Usages

Key Usages

65:9f:41:8c:ef:8c:66:d3:99:d1:15:29:32:ce:6f:41:82:76:17:d6:b5:a8:3e:b5:93:6c:1c:92:ac:77:62:c4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 121KB - Virtual size: 120KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

03:9c:7b:ed:67:02:ab:5e:3e:c9:7d:5c:d7:c6:7a:54
Certificate

65:9f:41:8c:ef:8c:66:d3:99:d1:15:29:32:ce:6f:41:82:76:17:d6:b5:a8:3e:b5:93:6c:1c:92:ac:77:62:c4
Signer

.text
Size: 121KB - Virtual size: 120KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B