f2a9db2369013e25229fdf9d36c9e4f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f2a9db2369013e25229fdf9d36c9e4f0N.exe
Size

60KB
MD5

f2a9db2369013e25229fdf9d36c9e4f0
SHA1

317db035fa557b2dd2a244ab9006a1e98d199660
SHA256

88cac25d888c3d23b59971d4be64ae029f085ce1346e3579d2b5a4d930bd2a29
SHA512

894461f23deea0f49f7f6784d0943337a3c83af0513a1130ff2219a0bc106bba83a3dc49dcd317a7c54e16b2770f5499d1ec63312827f48bd4fbb56a5793753b
SSDEEP

768:xbGP/n1r4fA67B4VKC4LaoUGBOnJD6nkK4hNdLchDMgMlbTrkJF7qjyCY:xS9R6F0jG8nJWnkthNKDMgKbTmF7XC

Score

1^/10

Malware Config

Signatures

Files

f2a9db2369013e25229fdf9d36c9e4f0N.exe
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:7a:d1:e6:eb:f5:a8:75:4c:2f:a2:17:29:61:e0:4f:ec:34:64:23:0e:a6:42:9c:0e:11:f9:78:2e:55:85:ce
Signer

Actual PE Digest

ad:7a:d1:e6:eb:f5:a8:75:4c:2f:a2:17:29:61:e0:4f:ec:34:64:23:0e:a6:42:9c:0e:11:f9:78:2e:55:85:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.AspNetCore.Cryptography.Internal.ni.pdb
/_/artifacts/obj/Microsoft.AspNetCore.Cryptography.Internal/Release/netcoreapp3.1/Microsoft.AspNetCore.Cryptography.Internal.pdb

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

ad:7a:d1:e6:eb:f5:a8:75:4c:2f:a2:17:29:61:e0:4f:ec:34:64:23:0e:a6:42:9c:0e:11:f9:78:2e:55:85:ceSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 1KB - Virtual size: 1KB

.text Size: 49KB - Virtual size: 49KB

.reloc Size: 512B - Virtual size: 204B

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

ad:7a:d1:e6:eb:f5:a8:75:4c:2f:a2:17:29:61:e0:4f:ec:34:64:23:0e:a6:42:9c:0e:11:f9:78:2e:55:85:ce
Signer

.data
Size: 1KB - Virtual size: 1KB

.text
Size: 49KB - Virtual size: 49KB

.reloc
Size: 512B - Virtual size: 204B