b38669df260f50b4f3969ab6a63c59a75e7c968f5081225e4d9ecb9135fa8143N

Sharing

Copy URL

Twitter E-mail

General

Target

b38669df260f50b4f3969ab6a63c59a75e7c968f5081225e4d9ecb9135fa8143N
Size

1.1MB
MD5

1680e694bacbeb6e8f51761a0e8b5770
SHA1

1c52dd742d36a9166d12233dac57becd0543d406
SHA256

b38669df260f50b4f3969ab6a63c59a75e7c968f5081225e4d9ecb9135fa8143
SHA512

bf15e6626d7d6eaf29b61ee93bcab9251cb9ce6ef44d45455a202c02dbcb3ae6cfdcb189a0ad8295fb972efce62906e9aa5388023e5dbb31ade8f2ea74dd016a
SSDEEP

24576:ohntGx9yVf41ob4s6ABttGZOATIZXTnR1l:QtGZ1oEEbG8xXjl

Score

1^/10

Malware Config

Signatures

Files

b38669df260f50b4f3969ab6a63c59a75e7c968f5081225e4d9ecb9135fa8143N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:a7:12:10:59:30:55:ab:3e:b0:ef:3d:20:8f:a8:27:1a:ad:3a:d8:a2:41:83:6a:b5:ef:80:e8:e2:00:ae:16
Signer

Actual PE Digest

80:a7:12:10:59:30:55:ab:3e:b0:ef:3d:20:8f:a8:27:1a:ad:3a:d8:a2:41:83:6a:b5:ef:80:e8:e2:00:ae:16

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 920KB - Virtual size: 919KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

80:a7:12:10:59:30:55:ab:3e:b0:ef:3d:20:8f:a8:27:1a:ad:3a:d8:a2:41:83:6a:b5:ef:80:e8:e2:00:ae:16Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 920KB - Virtual size: 919KB

.rsrc Size: 140KB - Virtual size: 140KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

80:a7:12:10:59:30:55:ab:3e:b0:ef:3d:20:8f:a8:27:1a:ad:3a:d8:a2:41:83:6a:b5:ef:80:e8:e2:00:ae:16
Signer

.text
Size: 920KB - Virtual size: 919KB

.rsrc
Size: 140KB - Virtual size: 140KB

.reloc
Size: 512B - Virtual size: 12B