MonitorDeNotas[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MonitorDeNotas.exe
Size 3.3MB
Sample260817-sw2wjatcmd
SHA256 9d5106db24aea4253e8e558fe6e52d2c88546da043e8a01c0958f32cfd5b6c7b
MD5 77059970d68fed1d1e6bf88ca8e8edbd
SHA1 1eae755c6dad37210c693b12563d9444f535e79c
SHA512 eb6affff4a7c5f05865b02fb54bb703851ebb43cad253134b131d02dc0551c383ca31a86f58cdbdf83e3a6913f2339f885cd5074726cd85257ba4adee094c76c
SSDEEP 24576:EloLspYbV83N7Pwo8T5sMiTizpZp5iDp5iUpipZpPdw8j/wkFsj6f0/Jhj1YIQXf:EloLkaIEK1MKnkqXfd+/9A/I
TLSH
T1BCF5D2F63F945A4AE148A730C156AA299BA18E02AF1DF357C255313DFDB23D38D0B853
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

MonitorDeNotas.exe

.exe 3.3MB

MonitorDeNotas.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9d5106db24aea4253e8e558fe6e52d2c88546da043e8a01c0958f32cfd5b6c7b
MD5 77059970d68fed1d1e6bf88ca8e8edbd
SHA1 1eae755c6dad37210c693b12563d9444f535e79c
SHA512 eb6affff4a7c5f05865b02fb54bb703851ebb43cad253134b131d02dc0551c383ca31a86f58cdbdf83e3a6913f2339f885cd5074726cd85257ba4adee094c76c
SSDEEP 24576:EloLspYbV83N7Pwo8T5sMiTizpZp5iDp5iUpipZpPdw8j/wkFsj6f0/Jhj1YIQXf:EloLkaIEK1MKnkqXfd+/9A/I
TLSH
T1BCF5D2F63F945A4AE148A730C156AA299BA18E02AF1DF357C255313DFDB23D38D0B853
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

4d:92:d9:7c:2d:44:7a:c7:3f:8e:bf:c5:1d:8b:36:19:f2:fe:10:97:28:ee:c3:c5:a1:c1:d3:42:98:bd:92:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=25.999.504/0001-98,CN=FSIST SISTEMAS ONLINE LTDA,O=FSIST SISTEMAS ONLINE LTDA,STREET=R TENISSON RIBEIRO\, 552,L=ARACAJU,ST=SERGIPE,C=BR,1.2.840.113549.1.9.1=#0c1261646d696e4066736973742e636f6d2e6272,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 2, 2025

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

6b:ef:96:66:d4:b3:84:ae:01:90:89:01

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 19, 2023 - Jul 19, 2026

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

3364006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Arquivos\Meus Programas\C.NET\MonitorDeNotas\Instalador\MonitorDeNotas.pdb

MonitorDeNotas.exe

mscoree

dotnet