fabbd30d44740ec2df378b4145113fc8ae919b0d25fd902d1c6af55e46638d19

Sharing

Copy URL

Twitter E-mail

General

Target

fabbd30d44740ec2df378b4145113fc8ae919b0d25fd902d1c6af55e46638d19
Size

3.5MB
MD5

e26bf23badb8afff9e70539ffd6ca7e4
SHA1

f2c387446c03ee7da47e7166263d1d2f345ff1cf
SHA256

fabbd30d44740ec2df378b4145113fc8ae919b0d25fd902d1c6af55e46638d19
SHA512

fe2a5f19cafe16fa6463d1df73c92e2f2e6752860ba9ba19f7d387c0b59cc8752be2097e260a389a3568a3422253a1bab0d95679f8a6c92b98ba856ff34cf759
SSDEEP

98304:7vLM9RjOpo1zMsVE8wppVom+NmesFZ0pmY6Df9xqqEby:2RjOqO85nNmDFZ0knf9Qy

Score

1^/10

Malware Config

Signatures

Files

fabbd30d44740ec2df378b4145113fc8ae919b0d25fd902d1c6af55e46638d19
.exe windows:5 windows x86 arch:x86

9198fc2d23be47103cdd9b44043cb6ff

Code Sign

54:fe:cd:73:d2:66:08:b9:44:14:6a:fd:d0:37:d5:42
Certificate

Issuer

CN=Oppo Electronic Korea

Not Before

17-11-2024 17:14

Not After

18-11-2034 17:14

Subject

CN=Oppo Electronic Korea

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15-01-2024 00:00

Not After

14-04-2035 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22-03-2021 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:1e:b5:81:ea:f9:6d:8d:37:b5:ec:1b:86:6c:44:a7:ab:78:cb:88:ba:a8:52:77:9b:dc:32:06:a4:e1:c3:68
Signer

Actual PE Digest

f4:1e:b5:81:ea:f9:6d:8d:37:b5:ec:1b:86:6c:44:a7:ab:78:cb:88:ba:a8:52:77:9b:dc:32:06:a4:e1:c3:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

rand

Sections

.MPRESS1
Size: 3.3MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9198fc2d23be47103cdd9b44043cb6ff

Code Sign

54:fe:cd:73:d2:66:08:b9:44:14:6a:fd:d0:37:d5:42Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate

Extended Key Usages

Key Usages

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate

Extended Key Usages

Key Usages

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate

Extended Key Usages

Key Usages

f4:1e:b5:81:ea:f9:6d:8d:37:b5:ec:1b:86:6c:44:a7:ab:78:cb:88:ba:a8:52:77:9b:dc:32:06:a4:e1:c3:68Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.MPRESS1 Size: 3.3MB - Virtual size: 10.0MB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 215KB - Virtual size: 215KB

54:fe:cd:73:d2:66:08:b9:44:14:6a:fd:d0:37:d5:42
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

f4:1e:b5:81:ea:f9:6d:8d:37:b5:ec:1b:86:6c:44:a7:ab:78:cb:88:ba:a8:52:77:9b:dc:32:06:a4:e1:c3:68
Signer

.MPRESS1
Size: 3.3MB - Virtual size: 10.0MB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 215KB - Virtual size: 215KB