bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881

Sharing

Copy URL

Twitter E-mail

General

Target

bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881
Size

240KB
MD5

548fa8f694ed1c25c219d93748fb856b
SHA1

e28cbba300e7381a8cc4e548cae6b73c78f939ad
SHA256

bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881
SHA512

856e8693cf4da203450fc0723a5d51ef0e309629a2101d588d0f00ac8c0368ea8f631dd8cff928cb5311397249db3f6024b6e939a70d9c9b809450ffd54f2da3
SSDEEP

3072:Z/0EX0X/E4r7cu1sF2OhY2czT81/SGZ1s+FWSBz65/M6If+3Js+3JFkKeTn5Nz:N000vXrDsF2MY2cnMVPFWSxBt25i

Score

1^/10

Malware Config

Signatures

Files

bc48b3506a5e5fcaeb79b4a40afabb2e5405318ccb23d465c193e54ac8374881
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:24

Not After

02-05-2020 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:ae:b8:ed:48:76:9b:04:62:67:63:bc:e0:a7:5d:b4:75:d7:b9:ba:cf:e6:2d:87:f8:a6:e7:e6:52:a4:12:05
Signer

Actual PE Digest

2c:ae:b8:ed:48:76:9b:04:62:67:63:bc:e0:a7:5d:b4:75:d7:b9:ba:cf:e6:2d:87:f8:a6:e7:e6:52:a4:12:05

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

2c:ae:b8:ed:48:76:9b:04:62:67:63:bc:e0:a7:5d:b4:75:d7:b9:ba:cf:e6:2d:87:f8:a6:e7:e6:52:a4:12:05Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 131KB - Virtual size: 131KB

.rsrc Size: 99KB - Virtual size: 99KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

2c:ae:b8:ed:48:76:9b:04:62:67:63:bc:e0:a7:5d:b4:75:d7:b9:ba:cf:e6:2d:87:f8:a6:e7:e6:52:a4:12:05
Signer

.text
Size: 131KB - Virtual size: 131KB

.rsrc
Size: 99KB - Virtual size: 99KB

.reloc
Size: 512B - Virtual size: 12B