869d31f014830db5de0b429629c294b83573cdb8c4b19b53c01f4cb5f6dc4c8a

Sharing

Copy URL

Twitter E-mail

General

Target

869d31f014830db5de0b429629c294b83573cdb8c4b19b53c01f4cb5f6dc4c8a
Size

844KB
MD5

787172c2ffdbca266d335809b1fc56e5
SHA1

1a2d785f5f9df7e1af00f2c8c2efe1a84ed7fad6
SHA256

869d31f014830db5de0b429629c294b83573cdb8c4b19b53c01f4cb5f6dc4c8a
SHA512

3ccd51290047eefaab181f690f8b81d677c00dcaba944a8033016c0d8284ce01396a0ee376baedf6777c91d1c88737b7812b97ad4bf7aad1517edd87ae16a419
SSDEEP

24576:VPSmDpM22KFUiaGrnKN95WPkPgRmlbxx7MP+h2tSUxIMDdM1ia:VPd9M+FJn0hgR+tuTxIM5w

Score

N/A

Malware Config

Signatures

Files

869d31f014830db5de0b429629c294b83573cdb8c4b19b53c01f4cb5f6dc4c8a
.exe windows x86

Code Sign

7a:0f:35:a5:d3:01:11:3b:4c:50:98:4a:67:e2:f6:38
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-02-2006 00:00

Not After

09-02-2008 23:59

Subject

CN=WinRecovery Software,O=WinRecovery Software,POSTALCODE=210016,STREET=Yudao St. 29,L=Nanjing,ST=JS,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17-05-2005 00:00

Not After

16-05-2010 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

57:1c:2d:ae:13:bd:3f:97:50:8d:e9:e0:36:17:78:92:12:6d:e0:e1
Signer

Actual PE Digest

57:1c:2d:ae:13:bd:3f:97:50:8d:e9:e0:36:17:78:92:12:6d:e0:e1

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=WinRecovery Software,O=WinRecovery Software,POSTALCODE=210016,STREET=Yudao St. 29,L=Nanjing,ST=JS,C=CN

06-10-2022 18:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 479KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

7a:0f:35:a5:d3:01:11:3b:4c:50:98:4a:67:e2:f6:38Certificate

Extended Key Usages

Key Usages

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

57:1c:2d:ae:13:bd:3f:97:50:8d:e9:e0:36:17:78:92:12:6d:e0:e1Signer

Signature Validations

Verification

06-10-2022 18:34 Valid: false

Headers

File Characteristics

Sections

Size: 479KB - Virtual size: 1.3MB

Size: 2KB - Virtual size: 4KB

Size: 10KB - Virtual size: 36KB

Size: - Virtual size: 92KB

Size: 12KB - Virtual size: 16KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 80KB

.rsrc Size: 47KB - Virtual size: 404KB

.data Size: 114KB - Virtual size: 116KB

.adata Size: - Virtual size: 4KB

.lif Size: 1KB - Virtual size: 4KB

7a:0f:35:a5:d3:01:11:3b:4c:50:98:4a:67:e2:f6:38
Certificate

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

57:1c:2d:ae:13:bd:3f:97:50:8d:e9:e0:36:17:78:92:12:6d:e0:e1
Signer

06-10-2022 18:34
Valid: false

.rsrc
Size: 47KB - Virtual size: 404KB

.data
Size: 114KB - Virtual size: 116KB

.adata
Size: - Virtual size: 4KB

.lif
Size: 1KB - Virtual size: 4KB