58b7c32bb99bdf9fed1dfe2a0de8cf59913754ae3a098473fa8b09f9c11b7708[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

58b7c32bb99bdf9fed1dfe2a0de8cf59913754ae3a098473fa8b09f9c11b7708.exe
Size

3.9MB
MD5

6df609839aa0d62360454083aed10c88
SHA1

d819f078c4d5674843c51a2a1cb8738a445f9a9a
SHA256

58b7c32bb99bdf9fed1dfe2a0de8cf59913754ae3a098473fa8b09f9c11b7708
SHA512

18a49ea591fb9cd7b06d794745f82b91a854a54d78a2b3bdaec8785f9aa8c69560674f83b68a51692b36ea8c1ae54de63713e5cbf83c3e492755b406c402d6ea
SSDEEP

98304:q9aEydaq3WhgTUyTscRzY3PE1dhw+xw3TZjV:VZd1nIyTsczwc1dhwx3TZjV

Score

1^/10

Malware Config

Signatures

Files

58b7c32bb99bdf9fed1dfe2a0de8cf59913754ae3a098473fa8b09f9c11b7708.exe
.dll windows:6 windows x86 arch:x86

427c3e2166ea71a30073c3b1f9bf9ab9

Code Sign

1e:41:f8:64:a0:2a:5d:5d:b4:09:19:7e:11:5d:d3:15
Certificate

Issuer

CN=fairyclient

Not Before

28/02/2023, 16:03

Not After

01/01/2030, 08:00

Subject

CN=fairyclient

Extended Key Usages

ExtKeyUsageCodeSigning

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26/09/2024, 00:00

Not After

25/11/2035, 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:67:18:d7:be:83:dd:77:03:61:eb:8c:0a:6f:fb:3e:af:22:e6:b2:e7:0d:c4:43:f2:02:73:30:e7:11:a4:78
Signer

Actual PE Digest

20:67:18:d7:be:83:dd:77:03:61:eb:8c:0a:6f:fb:3e:af:22:e6:b2:e7:0d:c4:43:f2:02:73:30:e7:11:a4:78

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

send

kernel32

SetStdHandle

user32

UnregisterClassA

gdi32

GetStockObject

Exports

Exports

GasMask_5

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.H]H
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.a{1
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.guX
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

427c3e2166ea71a30073c3b1f9bf9ab9

Code Sign

1e:41:f8:64:a0:2a:5d:5d:b4:09:19:7e:11:5d:d3:15Certificate

Extended Key Usages

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

20:67:18:d7:be:83:dd:77:03:61:eb:8c:0a:6f:fb:3e:af:22:e6:b2:e7:0d:c4:43:f2:02:73:30:e7:11:a4:78Signer

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 317KB

.data Size: - Virtual size: 36KB

.idata Size: - Virtual size: 6KB

.detourc Size: - Virtual size: 5KB

.detourd Size: - Virtual size: 270B

.tls Size: - Virtual size: 777B

.00cfg Size: - Virtual size: 265B

.H]H Size: - Virtual size: 2.3MB

.a{1 Size: 1024B - Virtual size: 576B

.guX Size: 3.9MB - Virtual size: 3.9MB

.rsrc Size: 512B - Virtual size: 469B

.reloc Size: 512B - Virtual size: 332B

1e:41:f8:64:a0:2a:5d:5d:b4:09:19:7e:11:5d:d3:15
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

20:67:18:d7:be:83:dd:77:03:61:eb:8c:0a:6f:fb:3e:af:22:e6:b2:e7:0d:c4:43:f2:02:73:30:e7:11:a4:78
Signer

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 317KB

.data
Size: - Virtual size: 36KB

.idata
Size: - Virtual size: 6KB

.detourc
Size: - Virtual size: 5KB

.detourd
Size: - Virtual size: 270B

.tls
Size: - Virtual size: 777B

.00cfg
Size: - Virtual size: 265B

.H]H
Size: - Virtual size: 2.3MB

.a{1
Size: 1024B - Virtual size: 576B

.guX
Size: 3.9MB - Virtual size: 3.9MB

.rsrc
Size: 512B - Virtual size: 469B

.reloc
Size: 512B - Virtual size: 332B