68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221.exe
Size 1.8MB
Sample250227-dtyc1atps3
SHA256 68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221
MD5 f75ad0aa5397c534ba69c40f736f6e11
SHA1 294190bb853c05c9603faab7cdc40b01c0e844a4
SHA512 7585ea3d3cfdab7e601792e5ff8441a2719f5cbb09077b4a3c1919f6b997fd583d5eb555c0afb623114f36f2aa035a45cfb2db7486b4f5a168651a1661bdc8bf
SSDEEP 49152:B1DptBfMESKX150K2DDzk5rDJnRwxBwcQq8gu:B1DptaESo50Kp5D0gtnz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221.exe

.exe 1.8MB

68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221
MD5 f75ad0aa5397c534ba69c40f736f6e11
SHA1 294190bb853c05c9603faab7cdc40b01c0e844a4
SHA512 7585ea3d3cfdab7e601792e5ff8441a2719f5cbb09077b4a3c1919f6b997fd583d5eb555c0afb623114f36f2aa035a45cfb2db7486b4f5a168651a1661bdc8bf
SSDEEP 49152:B1DptBfMESKX150K2DDzk5rDJnRwxBwcQq8gu:B1DptaESo50Kp5D0gtnz
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

ab:15:d3:5a:a1:fa:b8:22:e7:24:c9:14:59:23:95:1a:a9:2f:4b:94:20:e2:bf:0b:86:07:26:df:e8:00:76:33

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Secure By Design Inc.,O=Secure By Design Inc.,L=San Francisco,ST=CA,C=US,1.2.840.113549.1.9.1=#0c12636f6e74616374406e696e6974652e636f6d

Chains

Apr 12, 2017

CN=Secure By Design Inc.,O=Secure By Design Inc.,L=San Francisco,ST=CA,C=US,1.2.840.113549.1.9.1=#0c12636f6e74616374406e696e6974652e636f6d

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

PE Signature issue

Digest

92:20:0d:d9:19:f5:86:95:3e:08:2b:15:64:28:90:2b:b8:d6:77:b9

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Secure By Design Inc.,O=Secure By Design Inc.,L=San Francisco,ST=CA,C=US,1.2.840.113549.1.9.1=#0c12636f6e74616374406e696e6974652e636f6d

Chains

Apr 12, 2017

Subject

CN=Ninite Payload

Serial Number

Issuer

CN=Ninite Payload

Timespan

Jul 17, 2014 - Jul 18, 2014

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Secure By Design Inc.,O=Secure By Design Inc.,L=San Francisco,ST=CA,C=US,1.2.840.113549.1.9.1=#0c12636f6e74616374406e696e6974652e636f6d

Serial Number

21:dc:b4:05:b2:1d:03:a3:26:5a:94:a3

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 13, 2016 - Nov 30, 2019

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:0b:7f:6b:00:00:00:00:00:19

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=Secure By Design Inc.,O=Secure By Design Inc.,L=San Francisco,ST=CA,C=US,1.2.840.113549.1.9.1=#0c12636f6e74616374406e696e6974652e636f6d

Serial Number

42:a2:7c:81:93:9a:f4:4e:4b:b0:c2:48

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 13, 2016 - Nov 30, 2019

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 31, 2015 - Jul 9, 2019

Minor OS version

Major OS version

Entry point

5001216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

181KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

gqchvqxb

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

kbqtwris

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

68d67de87d8e3e8fbad2ca93d29365eb21a387f724c28c24b595360333a84221.exe

PE Signature issue

PE Signature issue

kernel32

generic