19022025_0655_sample[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

19022025_0655_sample.exe
Size

62KB
MD5

bf41fc54f96d0106d34f1c48827006e4
SHA1

cb998d02179f514a537f660046f5014f587fadd8
SHA256

1b9d3728a2c489d4166e8752525c88cf532db6409cf1147d6955ab4302c89b48
SHA512

d061cb6d31a4dab3aaefb7334347566d7678a48fd16d8db5e7ba55142884d50822b4e5877b5de8a14550f125aba13a947514aa789104aac9c538bbd865ea5b54
SSDEEP

1536:Ncw2LbyC+HX4fWEsAWyuAlfV/0Hjpl0PMRmIPT1c/ebioQ+Cf:ND5fHo+9ZyPRViL0PwPof

Score

1^/10

Malware Config

Signatures

Files

19022025_0655_sample.exe
.exe windows:5 windows x86 arch:x86

Password: infected

b8d9241eafb5d62c939c1ace4841da3e

Code Sign

e4:e7:95:fd:1f:d2:55:95:b8:69:ce:22:aa:7d:c4:9f
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

21-12-2020 00:00

Not After

21-12-2021 23:59

Subject

CN=OASIS COURT LIMITED,O=OASIS COURT LIMITED,POSTALCODE=CO3 9FA,STREET=10 Stoneleigh Park,L=Colchester,ST=Essex,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

21:01:46:fd:aa:3d:8b:65:4b:f4:5e:e5:62:a6:28:5f:9c:a2:a2:9f
Signer

Actual PE Digest

21:01:46:fd:aa:3d:8b:65:4b:f4:5e:e5:62:a6:28:5f:9c:a2:a2:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ntdll

wcsrchr

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

b8d9241eafb5d62c939c1ace4841da3e

Code Sign

e4:e7:95:fd:1f:d2:55:95:b8:69:ce:22:aa:7d:c4:9fCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

21:01:46:fd:aa:3d:8b:65:4b:f4:5e:e5:62:a6:28:5f:9c:a2:a2:9fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Sections

.text Size: 35KB - Virtual size: 34KB

.text1 Size: 1024B - Virtual size: 828B

.rdata Size: 512B - Virtual size: 392B

.data Size: 13KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 3KB

e4:e7:95:fd:1f:d2:55:95:b8:69:ce:22:aa:7d:c4:9f
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

21:01:46:fd:aa:3d:8b:65:4b:f4:5e:e5:62:a6:28:5f:9c:a2:a2:9f
Signer

.text
Size: 35KB - Virtual size: 34KB

.text1
Size: 1024B - Virtual size: 828B

.rdata
Size: 512B - Virtual size: 392B

.data
Size: 13KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 3KB