881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a

Sharing

Copy URL

Twitter E-mail

General

Target

881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
Size

802KB
MD5

66fe9fc4a048631ec4ac9bc4ad55f501
SHA1

302188f68b430e20f0f28d8ec9697a216e341d79
SHA256

881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
SHA512

71b6fa38cc25d2ceb360b6b6ac6d725cd2137d8e4cd660bd1829997d2223ea9123d247006b3afee96e650b9014871b1d9579d69faa590c6501016a3152243530
SSDEEP

24576:dLa/diQs7a/ichDPvzoKndNQ2dliGBUam:dLlW/Nz/TNqNam

Score

1^/10

Malware Config

Signatures

Files

881b82a44e8578b6034c504725c33b6a22d1980affa052c4bf492c168915dc8a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

d8:60:08:5d:af:9e:a4:49:66:21:23:fb:c7:c0:4c:b1
Certificate

Issuer

CN=Pantum,O=Pantum

Not Before

01-03-2022 08:40

Not After

01-03-2023 08:40

Subject

CN=Pantum,O=Pantum

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:96:71:f4:2d:1c:93:da:fc:51:04:d3:64:e1:a3:17:cd:bc:42:48
Signer

Actual PE Digest

b4:96:71:f4:2d:1c:93:da:fc:51:04:d3:64:e1:a3:17:cd:bc:42:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\A\_work\974\s\artifacts\NuGet.LibraryModel\16.0\obj\release\net472\NuGet.LibraryModel.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

d8:60:08:5d:af:9e:a4:49:66:21:23:fb:c7:c0:4c:b1Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

b4:96:71:f4:2d:1c:93:da:fc:51:04:d3:64:e1:a3:17:cd:bc:42:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 784KB - Virtual size: 784KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 12B

d8:60:08:5d:af:9e:a4:49:66:21:23:fb:c7:c0:4c:b1
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

b4:96:71:f4:2d:1c:93:da:fc:51:04:d3:64:e1:a3:17:cd:bc:42:48
Signer

.text
Size: 784KB - Virtual size: 784KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 12B