readfile_s[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

readfile_s.exe
Size

331KB
MD5

6af50182c87e0bc1f91540ae29ecad08
SHA1

21e877ab2430b72e3db12881d878f78e0989bb7f
SHA256

27695e829f981e50c231a5d2a890d404b397f51103e84458a611b2625eb146bb
SHA512

c7d54bb5742e381faed3a1756252c07ca7133364e27193c306d0cddec2cbcbb2562df96453b3a584443f618a738ee8c7d1c3903cf563ac4b5bfddad24c517fa4
SSDEEP

6144:p9eVyruSl4zDqARSQvt/cdcR1KcBitApmdHJxnVuGGCGxg0yyXTTEK:reWomjkZRJBitCmdHJxVMK0yEEK

Score

1^/10

Malware Config

Signatures

Files

readfile_s.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

21:92:54:05:d5:c5:75:82:b4:90:08:8c:cf:94:dd:9e
Certificate

Issuer

CN=TrustAsia RSA Code Signing CA G3,O=TrustAsia Technologies\, Inc.,C=CN

Not Before

21/04/2023, 00:00

Not After

20/04/2024, 23:59

Subject

CN=深圳市迪元素科技有限公司,O=深圳市迪元素科技有限公司,ST=广东省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

31:32:65:58:50:5b:19:5d:e1:8f:8a:54:3e:c7:c1:17
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

20/04/2022, 00:00

Not After

19/04/2032, 23:59

Subject

CN=TrustAsia RSA Code Signing CA G3,O=TrustAsia Technologies\, Inc.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:01:9b:f2:8a:a8:f1:b0:00:41:c1:29:93:72:79:dd:1f:f3:96:a5
Signer

Actual PE Digest

76:01:9b:f2:8a:a8:f1:b0:00:41:c1:29:93:72:79:dd:1f:f3:96:a5

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\x5\netTools\oMain\ReadFile\obj\Release\ReadFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

21:92:54:05:d5:c5:75:82:b4:90:08:8c:cf:94:dd:9eCertificate

Extended Key Usages

Key Usages

31:32:65:58:50:5b:19:5d:e1:8f:8a:54:3e:c7:c1:17Certificate

Extended Key Usages

Key Usages

76:01:9b:f2:8a:a8:f1:b0:00:41:c1:29:93:72:79:dd:1f:f3:96:a5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 325KB - Virtual size: 324KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

21:92:54:05:d5:c5:75:82:b4:90:08:8c:cf:94:dd:9e
Certificate

31:32:65:58:50:5b:19:5d:e1:8f:8a:54:3e:c7:c1:17
Certificate

76:01:9b:f2:8a:a8:f1:b0:00:41:c1:29:93:72:79:dd:1f:f3:96:a5
Signer

.text
Size: 325KB - Virtual size: 324KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B