1231[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

1231.exe
Size

493KB
MD5

8e92c683e644b7e88184427d1b8625bb
SHA1

8b57d61299f7eaa32df979f54483ff72b47ba8f6
SHA256

9f800400f5ed4b80a6d032a437e3b7fc8fa53978854726fdfc0f2737c1237596
SHA512

027a5b35ef52be102fe4447be581140fc3cdbfd73d4531f1ebfab75672c84946dd9a4dd5ac144d9cf5e9b60a2890e0a975b254674d58ee24e3cbfc5282521dde
SSDEEP

12288:86dbSjl1WZ1oIL0WoxG3arMd9sG3SOH5:PmBMIIoWCN4Hsk7Z

Score

1^/10

Malware Config

Signatures

Files

1231.exe
.exe windows:4 windows x64 arch:x64

Code Sign

e9:26:74:75:e0:68:80:c7:1c:12:2a:d2:f1:ec:88:6f
Certificate

Issuer

CN=myfile inc\ ,C=CN

Not Before

20-05-2023 17:30

Not After

20-05-2024 17:30

Subject

CN=myfile inc\ ,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:db:5f:dc:98:0e:e6:b9:2b:fb:e1:cf:29:58:bf:cc:51:56:c3:58:b7:c0:6e:ed:56:07:15:6b:97:3e:2d:33
Signer

Actual PE Digest

2c:db:5f:dc:98:0e:e6:b9:2b:fb:e1:cf:29:58:bf:cc:51:56:c3:58:b7:c0:6e:ed:56:07:15:6b:97:3e:2d:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Louis Vuitton\source\repos\SudokuBoardVerifier-master\obj\x86\Debug\Sudoku.pdb

Sections

.text
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

e9:26:74:75:e0:68:80:c7:1c:12:2a:d2:f1:ec:88:6fCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

2c:db:5f:dc:98:0e:e6:b9:2b:fb:e1:cf:29:58:bf:cc:51:56:c3:58:b7:c0:6e:ed:56:07:15:6b:97:3e:2d:33Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 485KB - Virtual size: 485KB

.rsrc Size: 1KB - Virtual size: 1KB

e9:26:74:75:e0:68:80:c7:1c:12:2a:d2:f1:ec:88:6f
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

2c:db:5f:dc:98:0e:e6:b9:2b:fb:e1:cf:29:58:bf:cc:51:56:c3:58:b7:c0:6e:ed:56:07:15:6b:97:3e:2d:33
Signer

.text
Size: 485KB - Virtual size: 485KB

.rsrc
Size: 1KB - Virtual size: 1KB