e51432778ff90c6b4ca10b91080fa31e9838920c5bf4dfa76284d8cb7c1b11f5

Sharing

Copy URL Twitter E-mail

General

Target

e51432778ff90c6b4ca10b91080fa31e9838920c5bf4dfa76284d8cb7c1b11f5
Size

6.1MB
MD5

023485234c21ef51f663dbcb9716a152
SHA1

9879bb5273f970262388ade5a67232f916050fad
SHA256

e51432778ff90c6b4ca10b91080fa31e9838920c5bf4dfa76284d8cb7c1b11f5
SHA512

60612dcc4602eb7920496de434e81230ed17e1a584cc258bba3aec0ee37d5c0e3955fcfefc379736d32d4802cf894c5fd54873825f8658400ce96e9e32c790ab
SSDEEP

98304:dYhM1Hc/yb6U8HiGFWgTaDUFa6CBwxGQ3ndCCtbiUn0JFHzT:camrXFWgTa2PxHn0UmT

Score

1^/10

Malware Config

Signatures

Files

e51432778ff90c6b4ca10b91080fa31e9838920c5bf4dfa76284d8cb7c1b11f5
.exe windows:5 windows x64 arch:x64

21677d5520a73c1f84b882b3035163e7

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:b2:dc:3c:0f:1d:43:e1:d1:fe:62:5e:05:5c:14:80
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/02/2022, 00:00

Not After

20/02/2025, 23:59

Subject

CN=ing. Michal Mutl,O=ing. Michal Mutl,ST=Praha\, Hlavní město,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:e8:cb:c4:74:a4:3b:74:92:54:e1:87:f0:97:7c:7c:f1:f5:72:74:2c:32:04:01:ac:71:18:57:42:13:49:69
Signer

Actual PE Digest

5a:e8:cb:c4:74:a4:3b:74:92:54:e1:87:f0:97:7c:7c:f1:f5:72:74:2c:32:04:01:ac:71:18:57:42:13:49:69

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey

kernel32

GetModuleHandleA

shell32

DragFinish

user32

CopyRect

Sections

Size: - Virtual size: 12.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 200KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 585KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

21677d5520a73c1f84b882b3035163e7

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

7f:b2:dc:3c:0f:1d:43:e1:d1:fe:62:5e:05:5c:14:80Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

5a:e8:cb:c4:74:a4:3b:74:92:54:e1:87:f0:97:7c:7c:f1:f5:72:74:2c:32:04:01:ac:71:18:57:42:13:49:69Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

user32

Sections

Size: - Virtual size: 12.2MB

Size: - Virtual size: 988KB

Size: - Virtual size: 200KB

Size: - Virtual size: 31KB

Size: - Virtual size: 38KB

Size: - Virtual size: 108B

Size: - Virtual size: 2KB

Size: - Virtual size: 109B

.reloc Size: 534KB - Virtual size: 533KB

.rsrc Size: 585KB - Virtual size: 1.5MB

Size: 347KB - Virtual size: 347KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

7f:b2:dc:3c:0f:1d:43:e1:d1:fe:62:5e:05:5c:14:80
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

5a:e8:cb:c4:74:a4:3b:74:92:54:e1:87:f0:97:7c:7c:f1:f5:72:74:2c:32:04:01:ac:71:18:57:42:13:49:69
Signer

.reloc
Size: 534KB - Virtual size: 533KB

.rsrc
Size: 585KB - Virtual size: 1.5MB