Windows-ISO-Downloader[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Windows-ISO-Downloader.exe
Size

7.0MB
MD5

42be2387ea24923622219a33c504c091
SHA1

1f4ba0eefbf14aa351debe48fed9756c301fa866
SHA256

d9e52b0dbb5d3540016497c913e4186433c2ecd14e359eb841d5d93c8b021aef
SHA512

584e407b85613db0918e49780f7bcbb84d0d7720482d1128c27d62f0f2aeac4ca2bc6e1e91d9c834ef06d82d76a5ec6aa9c4b47641e7b8ff8a77a2c29290b98f
SSDEEP

98304:WI68IzIRIRIlgRnQmlGx0zcFLWoDy9G32dm/RUFVHB/mQJCyE:gXRnQm5yWoDy9GGOIlBew8

Score

1^/10

Malware Config

Signatures

Files

Windows-ISO-Downloader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15-05-2018 00:00

Not After

15-05-2022 23:59

Subject

CN=HeiDoc V.O.F.,O=HeiDoc V.O.F.,POSTALCODE=6291 HD,STREET=Ir Em Mélottestraat 33,L=Vaals,ST=Limburg,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:78:2e:9d:1c:5a:69:b3:dd:42:97:70:c8:30:b7:7a:47:e6:99:9d:6e:7c:66:20:67:f5:ff:9f:9e:b6:ed:8e
Signer

Actual PE Digest

20:78:2e:9d:1c:5a:69:b3:dd:42:97:70:c8:30:b7:7a:47:e6:99:9d:6e:7c:66:20:67:f5:ff:9f:9e:b6:ed:8e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jan\source\repos\Windows ISO Downloader\Windows ISO Downloader\obj\Debug\Windows-ISO-Downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

20:78:2e:9d:1c:5a:69:b3:dd:42:97:70:c8:30:b7:7a:47:e6:99:9d:6e:7c:66:20:67:f5:ff:9f:9e:b6:ed:8eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 6.7MB - Virtual size: 6.7MB

.rsrc Size: 301KB - Virtual size: 300KB

.reloc Size: 512B - Virtual size: 12B

f8:0b:43:ba:24:93:cb:eb:1b:d1:9f:dd:ad:0a:0c:44
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

20:78:2e:9d:1c:5a:69:b3:dd:42:97:70:c8:30:b7:7a:47:e6:99:9d:6e:7c:66:20:67:f5:ff:9f:9e:b6:ed:8e
Signer

.text
Size: 6.7MB - Virtual size: 6.7MB

.rsrc
Size: 301KB - Virtual size: 300KB

.reloc
Size: 512B - Virtual size: 12B