5a003dae6e2ad881ce20d42bb2b5f310N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5a003dae6e2ad881ce20d42bb2b5f310N.exe
Size

12KB
MD5

5a003dae6e2ad881ce20d42bb2b5f310
SHA1

b40cce5173b650c47c95b455b276a4699f409e83
SHA256

b51bdb26c1a6560e7ec83ae3f2a20d1fbd8ce61f28b85d04220cad72a3d01c17
SHA512

86c903858e95cf2f7cc644cd4f7471e82889af52d5d2315751de5cbbfbbf8f3be76c87cff92e5ddc6e47e9563a03f3f79bd92e0b84a5f9312affd47f8f570097
SSDEEP

192:SdRWZhWicCroDBQABJPN2NchC6zm60X01k9z3AeOi7Q5:SdRWZhWbDBRJl2NcM6a1R9z/fc5

Score

1^/10

Malware Config

Signatures

Files

5a003dae6e2ad881ce20d42bb2b5f310N.exe
.dll windows:10 windows x86 arch:x86

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:87:f9:51:dc:f1:03:79:09:f1:c6:e0:20:ff:05:b7:00:19:3d:13:87:4e:17:01:08:cf:51:3c:9d:c0:e5:98
Signer

Actual PE Digest

1a:87:f9:51:dc:f1:03:79:09:f1:c6:e0:20:ff:05:b7:00:19:3d:13:87:4e:17:01:08:cf:51:3c:9d:c0:e5:98

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-io-l1-1-0.pdb

Exports

Exports

CancelIoEx
CreateIoCompletionPort
DeviceIoControl
GetOverlappedResult
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus

Sections

.text
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3cCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

1a:87:f9:51:dc:f1:03:79:09:f1:c6:e0:20:ff:05:b7:00:19:3d:13:87:4e:17:01:08:cf:51:3c:9d:c0:e5:98Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 857B

.data Size: - Virtual size: 64B

.rsrc Size: 1024B - Virtual size: 1008B

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

1a:87:f9:51:dc:f1:03:79:09:f1:c6:e0:20:ff:05:b7:00:19:3d:13:87:4e:17:01:08:cf:51:3c:9d:c0:e5:98
Signer

.text
Size: 1024B - Virtual size: 857B

.data
Size: - Virtual size: 64B

.rsrc
Size: 1024B - Virtual size: 1008B