dee2d83080b71ba63fc196e23cf37c70N

Sharing

Copy URL Twitter E-mail

General

Target

dee2d83080b71ba63fc196e23cf37c70N
Size

2.4MB
MD5

dee2d83080b71ba63fc196e23cf37c70
SHA1

f79dd4faf9590847263a346f4cda15e8044d0a66
SHA256

dcb4f7c7173a58e8cd95d55368ba56217d5bcb2f5667d0f4ab1d0a6f5a5fb25a
SHA512

a3e2a750d0242d3da7aac7a95d0f1b294bde9d903b18c21b87d927eab570b9233fb76ab8eef95d0f7a668890978d8e181040a1bd3149756b42b8b0136bc4093b
SSDEEP

49152:xNYMsURY5CX8pR/C0S97ZP0VX09vnzMWXCp:xNYM24G/C0SlA0lzJSp

Score

1^/10

Malware Config

Signatures

Files

dee2d83080b71ba63fc196e23cf37c70N
.exe windows:6 windows x86 arch:x86

91115228e29a041a5d07cb8835335f09

Code Sign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:64:e5:80:91:d3:11:bd:a7:8a:6c:34
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

06/02/2024, 05:28

Not After

06/02/2027, 05:28

Subject

CN=The WinReducer Project,O=The WinReducer Project,L=Angoulême,ST=Nouvelle-Aquitaine,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07/11/2023, 17:13

Not After

09/12/2034, 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:30:1b:5f:c9:4a:2f:21:a4:49:b4:91:f6:e3:6f:72:36:b6:2d:c0:0c:5a:a8:24:e6:b6:6e:b8:ae:ec:2e:3b
Signer

Actual PE Digest

16:30:1b:5f:c9:4a:2f:21:a4:49:b4:91:f6:e3:6f:72:36:b6:2d:c0:0c:5a:a8:24:e6:b6:6e:b8:ae:ec:2e:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

GetDC

advapi32

RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_cexit

shell32

SHGetDiskFreeSpaceA

comctl32

ImageList_SetBkColor

mscoree

_CorExeMain

vcruntime140

_except_handler4_common

Sections

Size: - Virtual size: 5.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

91115228e29a041a5d07cb8835335f09

Code Sign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

5f:64:e5:80:91:d3:11:bd:a7:8a:6c:34Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

16:30:1b:5f:c9:4a:2f:21:a4:49:b4:91:f6:e3:6f:72:36:b6:2d:c0:0c:5a:a8:24:e6:b6:6e:b8:ae:ec:2e:3bSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

api-ms-win-crt-runtime-l1-1-0

shell32

comctl32

mscoree

vcruntime140

Sections

Size: - Virtual size: 5.8MB

Size: 1024B - Virtual size: 4KB

.rsrc Size: 262KB - Virtual size: 262KB

Size: 96KB - Virtual size: 100KB

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

5f:64:e5:80:91:d3:11:bd:a7:8a:6c:34
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

16:30:1b:5f:c9:4a:2f:21:a4:49:b4:91:f6:e3:6f:72:36:b6:2d:c0:0c:5a:a8:24:e6:b6:6e:b8:ae:ec:2e:3b
Signer

.rsrc
Size: 262KB - Virtual size: 262KB