BITpWn8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BITpWn8.exe
Size

199.3MB
MD5

714fb9c2bc8dc6e9ed5a1a1e192b8541
SHA1

cade3709cf59544cd95d79c9fe4c7fac9a0df66b
SHA256

dea6281d0fe8a470d80abb636e4035d7a05e3b504eb82cea6e88d7d19aabc390
SHA512

da6e4859d9bda0c8a6834d7a47c4df2e845fba7b58fd34c830f931bdf2f681ba708c7e63fb9dffd892b86976a44c1c1c9f492477fdf1de5d51d6c80bbf2267a6
SSDEEP

3145728:LUjoRHQAAYiZtjFV9hxTtFcCOuzIAaVwMGX2D6DXqlO9+yzTM1PaGrwnL8P4Eu5I:LUjJAKtp3cAha7C9Pz3Gc8wE0zwQ1lm

Score

1^/10

Malware Config

Signatures

Files

BITpWn8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3c:1c:90:da:28:55:ad:c8:00:40:38:1f:4b:b6:af:e7
Certificate

Issuer

CN=HHIVHBPXTW Certificate Authority

Not Before

09/10/2024, 05:32

Not After

09/10/2054, 05:32

Subject

CN=HHIVHBPXTW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:f1:85:24:c7:a1:de:a2:44:0b:fc:9d:67:68:c4:52
Certificate

Issuer

CN=HHIVHBPXTW Certificate Authority

Not Before

09/10/2024, 05:32

Not After

09/10/2054, 05:32

Subject

CN=HHIVHBPXTW Certificate Authority

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

70:76:26:3c:45:2b:5c:a7:78:6d:e6:c4:e7:87:22:0e:5c:0d:41:f2
Signer

Actual PE Digest

70:76:26:3c:45:2b:5c:a7:78:6d:e6:c4:e7:87:22:0e:5c:0d:41:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.8MB - Virtual size: 15.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3c:1c:90:da:28:55:ad:c8:00:40:38:1f:4b:b6:af:e7Certificate

Extended Key Usages

Key Usages

27:f1:85:24:c7:a1:de:a2:44:0b:fc:9d:67:68:c4:52Certificate

Key Usages

70:76:26:3c:45:2b:5c:a7:78:6d:e6:c4:e7:87:22:0e:5c:0d:41:f2Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 15.8MB - Virtual size: 15.8MB

.rsrc Size: 182KB - Virtual size: 182KB

.reloc Size: 512B - Virtual size: 12B

3c:1c:90:da:28:55:ad:c8:00:40:38:1f:4b:b6:af:e7
Certificate

27:f1:85:24:c7:a1:de:a2:44:0b:fc:9d:67:68:c4:52
Certificate

70:76:26:3c:45:2b:5c:a7:78:6d:e6:c4:e7:87:22:0e:5c:0d:41:f2
Signer

.text
Size: 15.8MB - Virtual size: 15.8MB

.rsrc
Size: 182KB - Virtual size: 182KB

.reloc
Size: 512B - Virtual size: 12B