add7248ca082a7fd942f2d8f4c8518aa56beb5e68411b709ca40d2665869eb45[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

add7248ca082a7fd942f2d8f4c8518aa56beb5e68411b709ca40d2665869eb45.rar
Size

623KB
MD5

ee20427a27946c8557b7aa4e64c0dccf
SHA1

bf28278f292b131ab3c3734db187f85b33abab49
SHA256

add7248ca082a7fd942f2d8f4c8518aa56beb5e68411b709ca40d2665869eb45
SHA512

7d00bfb0d52128af85a30da6395bfe50ddeeab61b57c514848fa0a45a708ed1fc9b0b8f7619382880773b34f9f9d597edc1940559aba398ca41bea3fc22e6e52
SSDEEP

12288:SueJ2eeOp7rLlGtX6cW0rRLg8j2rvZJF19ZCOXRoWcob5fBR:S/eOJrLAXthC7PmOXRhc89

Score

1^/10

Malware Config

Signatures

Files

add7248ca082a7fd942f2d8f4c8518aa56beb5e68411b709ca40d2665869eb45.rar
.rar
BOM-V29--20240618 Overdue.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:07:99:1a:4d:82:8c:da:81:f5:25:ae:90:67:a1:28:be:a8:be:5d:4c:1f:58:76:a6:37:cc:a5:24:3e:b6:70
Signer

Actual PE Digest

48:07:99:1a:4d:82:8c:da:81:f5:25:ae:90:67:a1:28:be:a8:be:5d:4c:1f:58:76:a6:37:cc:a5:24:3e:b6:70

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ecCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

48:07:99:1a:4d:82:8c:da:81:f5:25:ae:90:67:a1:28:be:a8:be:5d:4c:1f:58:76:a6:37:cc:a5:24:3e:b6:70Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 679KB - Virtual size: 678KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

48:07:99:1a:4d:82:8c:da:81:f5:25:ae:90:67:a1:28:be:a8:be:5d:4c:1f:58:76:a6:37:cc:a5:24:3e:b6:70
Signer

.text
Size: 679KB - Virtual size: 678KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 12B