a2f8feca76e20285bb882338591731e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a2f8feca76e20285bb882338591731e0N.exe
Size

34KB
MD5

a2f8feca76e20285bb882338591731e0
SHA1

d35fae46961f5711e4db0a169d879b3e3065fdb7
SHA256

414300b90541f10e0418175672dedb5e1fe1f569da976d43fa53560a9744dfa3
SHA512

89839cdfc10bfe0f8c2e62218fe39007866213259848f281642a91696fb510e5acd1b2680a74d18434f35a0bf61a93f24c067ebd666f4c4995be8f41824cc0d3
SSDEEP

384:6WhqO6lYfUYUyRxo5ka0HXT9FEX6HRN7o/6fR9zVvb65:tz6lYf3RD9CWP9z0

Score

1^/10

Malware Config

Signatures

Files

a2f8feca76e20285bb882338591731e0N.exe
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2024, 20:25

Not After

19/02/2025, 20:25

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:3a:f1:4c:6b:85:c0:1d:80:cc:5d:93:9b:e1:4f:cf:6d:e6:2b:2d:5d:20:e0:38:25:c3:e0:bb:68:a6:d0:c9
Signer

Actual PE Digest

ef:3a:f1:4c:6b:85:c0:1d:80:cc:5d:93:9b:e1:4f:cf:6d:e6:2b:2d:5d:20:e0:38:25:c3:e0:bb:68:a6:d0:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

PresentationFramework-SystemData.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemData/x64/Release/net9.0/PresentationFramework-SystemData.pdb

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

ef:3a:f1:4c:6b:85:c0:1d:80:cc:5d:93:9b:e1:4f:cf:6d:e6:2b:2d:5d:20:e0:38:25:c3:e0:bb:68:a6:d0:c9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 124B

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

ef:3a:f1:4c:6b:85:c0:1d:80:cc:5d:93:9b:e1:4f:cf:6d:e6:2b:2d:5d:20:e0:38:25:c3:e0:bb:68:a6:d0:c9
Signer

.text
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 124B