cbb302b30ee9eeaede1bca45603d3363e42d2d3302574467186eff6fd5349310N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

cbb302b30ee9eeaede1bca45603d3363e42d2d3302574467186eff6fd5349310N.exe
Size

959KB
MD5

ec320d17514670ae8d4a19b226572d60
SHA1

5c3eadd977f46dcc4b3c7dbd3513b4f22970354d
SHA256

cbb302b30ee9eeaede1bca45603d3363e42d2d3302574467186eff6fd5349310
SHA512

383f07b53d26bb166e1f059159a632e60f8604e8765314663f606f0cb5e4b1893c82ed9dccdcfb1431cf034dc95c959fda354740408639c52306a8e4a28e6ed5
SSDEEP

12288:bfeDOa9r5j5XqkJD0QrOod7XxlW91RRep+rgRNyA55IxJ2DJn0p51:SD39dlfGQrFUspugRNJI2DJn0pf

Score

1^/10

Malware Config

Signatures

Files

cbb302b30ee9eeaede1bca45603d3363e42d2d3302574467186eff6fd5349310N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b9:e9:32:99:25:50:87:05:b5:84:e5:b9:3b:df:77:6d:2d:fb:f3:dd:1f:87:3d:ed:be:ed:56:1c:87:eb:17:f7
Signer

Actual PE Digest

b9:e9:32:99:25:50:87:05:b5:84:e5:b9:3b:df:77:6d:2d:fb:f3:dd:1f:87:3d:ed:be:ed:56:1c:87:eb:17:f7

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

b9:e9:32:99:25:50:87:05:b5:84:e5:b9:3b:df:77:6d:2d:fb:f3:dd:1f:87:3d:ed:be:ed:56:1c:87:eb:17:f7Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 698KB - Virtual size: 697KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b9:e9:32:99:25:50:87:05:b5:84:e5:b9:3b:df:77:6d:2d:fb:f3:dd:1f:87:3d:ed:be:ed:56:1c:87:eb:17:f7
Signer

.text
Size: 698KB - Virtual size: 697KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 512B - Virtual size: 12B