EF520_B18Payment_2600_D3781_N3895_L1029_H482_X4782_E3819[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

EF520_B18Payment_2600_D3781_N3895_L1029_H482_X4782_E3819.exe
Size

124KB
MD5

729b9575b09bf6d5815aa3dd046aa85a
SHA1

4882f934aa04441c6b29eb050da6f43251cbfbaa
SHA256

9c8ab6170cf21fe82dac97109e95fd3e3d65bb458a1ff163eaecdbf3a2271f96
SHA512

f2ec78b05f0c88aeeca5be96292359d4ba319851622fdce09ff032d5f3f26d68abb0452b44c9c2aa4fbe61b0cb5cf0cf6b09d062e7fc38dfa06b69b90cac63cc
SSDEEP

768:xbDcAe77dfK9mKm69bYhPd6uy2B4+8lpWnoBJDt3hgZ:FwL779K9R9MFd3kl8noJ3hgZ

Score

1^/10

Malware Config

Signatures

Files

EF520_B18Payment_2600_D3781_N3895_L1029_H482_X4782_E3819.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:33:e4:47:8a:f5:bf:5a:3b:3e:45:86:65:e5:e9:14
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

01-12-2022 00:00

Not After

30-11-2025 23:59

Subject

CN=Fontlab\, Ltd.,O=Fontlab\, Ltd.,ST=Panamá,C=PA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d7:50:32:ca:8d:b5:e0:52:8d:87:8b:f5:8c:7d:eb:2d:ab:d4:44:64:f9:cb:d3:e2:5b:eb:07:d4:d0:aa:64:0c
Signer

Actual PE Digest

d7:50:32:ca:8d:b5:e0:52:8d:87:8b:f5:8c:7d:eb:2d:ab:d4:44:64:f9:cb:d3:e2:5b:eb:07:d4:d0:aa:64:0c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

23:33:e4:47:8a:f5:bf:5a:3b:3e:45:86:65:e5:e9:14Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

d7:50:32:ca:8d:b5:e0:52:8d:87:8b:f5:8c:7d:eb:2d:ab:d4:44:64:f9:cb:d3:e2:5b:eb:07:d4:d0:aa:64:0cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 111KB - Virtual size: 110KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

23:33:e4:47:8a:f5:bf:5a:3b:3e:45:86:65:e5:e9:14
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

d7:50:32:ca:8d:b5:e0:52:8d:87:8b:f5:8c:7d:eb:2d:ab:d4:44:64:f9:cb:d3:e2:5b:eb:07:d4:d0:aa:64:0c
Signer

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 111KB - Virtual size: 110KB

.reloc
Size: 512B - Virtual size: 12B