wfc6setup[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

wfc6setup.exe
Size

3.4MB
MD5

a981dcfe35737e689c30bd729205fed9
SHA1

f2910eaa3b0f229073cfb63715fc225caeea9cb5
SHA256

16442002148e25cc009ad69e6292ce763eeb93108a9008c35019ec2ca7252f32
SHA512

e004672275ad23d7413960836b9b78cd76f5d35809ca7dc3e09442e597b755cf215d02b39596039d71b03c697a47eb042dfc2f62c25463337c2bd7985c67c59e
SSDEEP

98304:hBoLPCWxrUBnsdmA/sR04TmVE4kqXf0FyexYcbEZK:hCLPCrBns/KPiV/kSIye6EEZK

Score

1^/10

Malware Config

Signatures

Files

wfc6setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:57:f7:78:b3:1a:e5:23:d6:67:13:17:18:d1:6e:b2
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

23-03-2022 00:00

Not After

16-03-2025 23:59

Subject

CN=Malwarebytes Inc.,O=Malwarebytes Inc.,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25-05-2021 00:00

Not After

24-05-2036 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

19-11-2020 20:32

Not After

19-11-2035 20:42

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2f:28:35:21:b5:92:0b:e0:fa:00:00:00:00:00:2f
Certificate

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Not Before

15-06-2023 19:38

Not After

14-06-2024 19:38

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:4E89-9666-FFE7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

16-04-2020 18:36

Not After

16-04-2045 18:44

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8
Certificate

Issuer

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

Not Before

22-04-2024 03:42

Not After

25-04-2024 03:42

Subject

CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8
Certificate

Issuer

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

Not Before

22-04-2024 03:42

Not After

25-04-2024 03:42

Subject

CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07
Certificate

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Not Before

13-04-2021 17:31

Not After

13-04-2026 17:31

Subject

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

01-04-2021 20:05

Not After

01-04-2036 20:15

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

19-11-2020 20:32

Not After

19-11-2035 20:42

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2e:30:2b:14:37:07:50:ad:83:00:00:00:00:00:2e
Certificate

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Not Before

15-06-2023 19:38

Not After

14-06-2024 19:38

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:C392-9641-4540,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07
Signer

Actual PE Digest

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07

Digest Algorithm

sha256

PE Digest Matches

true

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07
Signer

Actual PE Digest

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\jenkins\workspace\A_Binisoft_Mfwc\src\Setup\obj\Release\wfc6setup.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

a6:57:f7:78:b3:1a:e5:23:d6:67:13:17:18:d1:6e:b2Certificate

Extended Key Usages

Key Usages

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:dbCertificate

Extended Key Usages

Key Usages

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

33:00:00:00:2f:28:35:21:b5:92:0b:e0:fa:00:00:00:00:00:2fCertificate

Extended Key Usages

Key Usages

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99Certificate

Key Usages

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8Certificate

Extended Key Usages

Key Usages

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8Certificate

Extended Key Usages

Key Usages

33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07Certificate

Key Usages

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07Certificate

Key Usages

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

33:00:00:00:2e:30:2b:14:37:07:50:ad:83:00:00:00:00:00:2eCertificate

Extended Key Usages

Key Usages

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07Signer

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 12B

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

a6:57:f7:78:b3:1a:e5:23:d6:67:13:17:18:d1:6e:b2
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

33:00:00:00:2f:28:35:21:b5:92:0b:e0:fa:00:00:00:00:00:2f
Certificate

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8
Certificate

33:00:00:ea:f8:2e:47:e1:5f:c2:61:de:27:00:00:00:00:ea:f8
Certificate

33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07
Certificate

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

33:00:00:00:2e:30:2b:14:37:07:50:ad:83:00:00:00:00:00:2e
Certificate

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07
Signer

0a:76:0c:f4:6d:8f:ad:55:5e:08:ce:76:5c:5c:f8:ea:3d:12:55:73:01:0f:7d:ad:8b:4b:f2:d3:22:0f:64:07
Signer

.text
Size: 3.3MB - Virtual size: 3.3MB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 12B