28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b

Sharing

Copy URL

Twitter E-mail

General

Target

28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
Size

1.0MB
MD5

553d1e382f923f744c32fc9b32286e3e
SHA1

3bdb700a98aeec454b59bd826f0fcd04cee29cdc
SHA256

28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
SHA512

3d39f2b3ddf813d1b8b654e469bfa8b8f68fb3bee6823f7e49dab1add9920e4e7fdc8ff89a0d73c730e61128bcf86b162796232bbba1bbbcd3a7675817e36ccf
SSDEEP

12288:NGRvHO/Y9IreCfctWBc+hCUwbLJwezpEnfc27nVMHrfTpWr33W5oz5yOt3G/f/vQ:NrIoeCEtac88bLEcSnVKf1U55yOA34Cg

Score

N/A

Malware Config

Signatures

Files

28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
.exe windows x86

76591695e8ac263dccfb6d7e2675f02c

Code Sign

40:88:22:4a:ac:fe:9c:53:b7:5e:ef:f5:ce:10:2c:67
Certificate

Issuer

CN=DEMLPEBQ

Not Before

17-01-2019 11:38

Not After

31-12-2039 23:59

Subject

CN=DEMLPEBQ

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5b:5f:a4:af:08:5a:6c:62:f0:3f:27:0c:43:2e:ef:7f:2a:83:ee:bc:29:90:2b:b5:ae:a2:1e:6b:4f:16:b2:d8
Signer

Actual PE Digest

5b:5f:a4:af:08:5a:6c:62:f0:3f:27:0c:43:2e:ef:7f:2a:83:ee:bc:29:90:2b:b5:ae:a2:1e:6b:4f:16:b2:d8

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=DEMLPEBQ

18-01-2019 12:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetUnhandledExceptionFilter

user32

MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExW

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1012KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76591695e8ac263dccfb6d7e2675f02c

Code Sign

40:88:22:4a:ac:fe:9c:53:b7:5e:ef:f5:ce:10:2c:67Certificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

5b:5f:a4:af:08:5a:6c:62:f0:3f:27:0c:43:2e:ef:7f:2a:83:ee:bc:29:90:2b:b5:ae:a2:1e:6b:4f:16:b2:d8Signer

Signature Validations

Verification

18-01-2019 12:05 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 512B - Virtual size: 1012KB

40:88:22:4a:ac:fe:9c:53:b7:5e:ef:f5:ce:10:2c:67
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

5b:5f:a4:af:08:5a:6c:62:f0:3f:27:0c:43:2e:ef:7f:2a:83:ee:bc:29:90:2b:b5:ae:a2:1e:6b:4f:16:b2:d8
Signer

18-01-2019 12:05
Valid: false

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 512B - Virtual size: 1012KB