20240912204954-4456-620baa36-f0c6-4152-a8fc-d40bc113f42e

Sharing

Copy URL Twitter E-mail

General

Target

20240912204954-4456-620baa36-f0c6-4152-a8fc-d40bc113f42e
Size

2.8MB
MD5

a62bb595b27662dd18b85e19b7754089
SHA1

8ddcf05d26aa4566fcffcb7c2fcea3cd7205c37d
SHA256

6726055356620bcfe4ccedf93b74e240c912d24b4bf67ed2ac613070df10ac13
SHA512

20f65d8acd801e1368937d381be5d9cd9166bc3ab40e11fe2b3886b5604a417059308e53f5dae42d45e5e3ebe6571714e2022a67dfce1fa4f3f2e2b4ccd956fe
SSDEEP

24576:WA6q6rWxSoJ0IH2mPg5G83Zbz2MooeeJaNn5Xamt+CjmpZBZ49gE8:WARvhJvWg83Bz3w6CjmHB+9gL

Score

1^/10

Malware Config

Signatures

Files

20240912204954-4456-620baa36-f0c6-4152-a8fc-d40bc113f42e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

5c:a7:36:13:23:2a:d3:e6:8e:6f:be:cc:85:7c:15:5c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/10/2019, 00:00

Not After

12/10/2022, 23:59

Subject

CN=BTL Group Ltd,O=BTL Group Ltd,L=Bradford,ST=West Yorkshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:2d:74:32:e0:c3:fb:ef:4d:cc:bd:5d:52:e5:79:17:42:68:89:a1:1b:78:ef:0b:c5:c5:7e:66:93:74:73:f3
Signer

Actual PE Digest

ee:2d:74:32:e0:c3:fb:ef:4d:cc:bd:5d:52:e5:79:17:42:68:89:a1:1b:78:ef:0b:c5:c5:7e:66:93:74:73:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

5c:a7:36:13:23:2a:d3:e6:8e:6f:be:cc:85:7c:15:5cCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

ee:2d:74:32:e0:c3:fb:ef:4d:cc:bd:5d:52:e5:79:17:42:68:89:a1:1b:78:ef:0b:c5:c5:7e:66:93:74:73:f3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 364KB - Virtual size: 364KB

.reloc Size: 512B - Virtual size: 12B

5c:a7:36:13:23:2a:d3:e6:8e:6f:be:cc:85:7c:15:5c
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

ee:2d:74:32:e0:c3:fb:ef:4d:cc:bd:5d:52:e5:79:17:42:68:89:a1:1b:78:ef:0b:c5:c5:7e:66:93:74:73:f3
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 364KB - Virtual size: 364KB

.reloc
Size: 512B - Virtual size: 12B