6e14dc342324c0383a525353b333b29ccefaa70463a82be6896c7e1b3930f696

Sharing

Copy URL

Twitter E-mail

General

Target

6e14dc342324c0383a525353b333b29ccefaa70463a82be6896c7e1b3930f696
Size

1.2MB
MD5

79c28c7b05ad270df56f3b60fa8b8825
SHA1

9008fea611d4c815117c348a527b36f240534aee
SHA256

6e14dc342324c0383a525353b333b29ccefaa70463a82be6896c7e1b3930f696
SHA512

7a23f83482c63b0dbf6526d81617df14b9a46fc0f1a184bb8d7446ffc3dafb26810e974ce9b3ae4ad13e65055b851147a0a70d26e865ccc876cd8f687ad994f3
SSDEEP

24576:phntGx9yVf41ob4s6ABttGZOATIZXTnR1y:3tGZ1oEEbG8xXjy

Score

1^/10

Malware Config

Signatures

Files

6e14dc342324c0383a525353b333b29ccefaa70463a82be6896c7e1b3930f696
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:dd:c4:3c:a5:f5:e3:8d:d4:02:5d:64:62:e7:83:f4:55:d4:b8:0f:fa:52:a4:ba:60:eb:bc:13:4b:8b:8e:63
Signer

Actual PE Digest

47:dd:c4:3c:a5:f5:e3:8d:d4:02:5d:64:62:e7:83:f4:55:d4:b8:0f:fa:52:a4:ba:60:eb:bc:13:4b:8b:8e:63

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 920KB - Virtual size: 919KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

47:dd:c4:3c:a5:f5:e3:8d:d4:02:5d:64:62:e7:83:f4:55:d4:b8:0f:fa:52:a4:ba:60:eb:bc:13:4b:8b:8e:63Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 920KB - Virtual size: 919KB

.rsrc Size: 140KB - Virtual size: 140KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

47:dd:c4:3c:a5:f5:e3:8d:d4:02:5d:64:62:e7:83:f4:55:d4:b8:0f:fa:52:a4:ba:60:eb:bc:13:4b:8b:8e:63
Signer

.text
Size: 920KB - Virtual size: 919KB

.rsrc
Size: 140KB - Virtual size: 140KB

.reloc
Size: 512B - Virtual size: 12B