3fec862fccca933e751a18065b5daf6049ad3356de43a69a670db5d943e79538

Sharing

Copy URL Twitter E-mail

General

Target

3fec862fccca933e751a18065b5daf6049ad3356de43a69a670db5d943e79538
Size

884KB
MD5

6bf4f655130d82b0bb56bea9da78ff17
SHA1

ba7ba1eb48e81ed27e58c4738c7dfba21e227868
SHA256

3fec862fccca933e751a18065b5daf6049ad3356de43a69a670db5d943e79538
SHA512

5749f71e01432a220eaba6b1d6765d73c8a2417b4f24064cacdf178dac759415a648eccddc4b5ddafc1bbe852dc3b3433be2a20310db898e975a6c10e1654ff6
SSDEEP

12288:K+ZVi0pBP8rwjYXNXC4cUQusp6IeiQtr5DoDIwGequ0pF3DB/4KluUBhwUv7K:/vrP8rJXNXC4cWBffwGEWFVVnBhwUv+

Score

N/A

Malware Config

Signatures

Files

3fec862fccca933e751a18065b5daf6049ad3356de43a69a670db5d943e79538
.exe windows x86

Code Sign

b5:1e:bf:09:f5:17:89:07:27:57:47:a8:9d:29:c1:fd
Certificate

Issuer

CN=丨Burn丨,OU=Burn,O=Burn,L=咸阳,ST=陕西,C=CN,1.2.840.113549.1.9.1=#0c103835323135313137324071712e636f6d

Not Before

19/07/2012, 01:31

Not After

19/07/2014, 01:31

Subject

CN=丨Burn丨,OU=Burn,O=Burn,L=咸阳,ST=陕西,C=CN,1.2.840.113549.1.9.1=#0c103835323135313137324071712e636f6d

Key Usages

KeyUsageDigitalSignature
KeyUsageDataEncipherment

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5e:c6:bf:d4:c7:c4:19:b9:62:80:31:05:bd:8e:22:fc:8a:68:44:5a
Signer

Actual PE Digest

5e:c6:bf:d4:c7:c4:19:b9:62:80:31:05:bd:8e:22:fc:8a:68:44:5a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=丨Burn丨,OU=Burn,O=Burn,L=咸阳,ST=陕西,C=CN,1.2.840.113549.1.9.1=#0c103835323135313137324071712e636f6d

19/07/2012, 02:19
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 308KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEPack
Size: 328KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpr01
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

b5:1e:bf:09:f5:17:89:07:27:57:47:a8:9d:29:c1:fdCertificate

Key Usages

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

5e:c6:bf:d4:c7:c4:19:b9:62:80:31:05:bd:8e:22:fc:8a:68:44:5aSigner

Signature Validations

Verification

19/07/2012, 02:19 Valid: false

Headers

File Characteristics

Sections

.text Size: 215KB - Virtual size: 500KB

.rdata Size: 308KB - Virtual size: 768KB

.data Size: 17KB - Virtual size: 256KB

.rsrc Size: 10KB - Virtual size: 344KB

.PEPack Size: 328KB - Virtual size: 332KB

.xpr01 Size: - Virtual size: 4KB

b5:1e:bf:09:f5:17:89:07:27:57:47:a8:9d:29:c1:fd
Certificate

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

5e:c6:bf:d4:c7:c4:19:b9:62:80:31:05:bd:8e:22:fc:8a:68:44:5a
Signer

19/07/2012, 02:19
Valid: false

.text
Size: 215KB - Virtual size: 500KB

.rdata
Size: 308KB - Virtual size: 768KB

.data
Size: 17KB - Virtual size: 256KB

.rsrc
Size: 10KB - Virtual size: 344KB

.PEPack
Size: 328KB - Virtual size: 332KB

.xpr01
Size: - Virtual size: 4KB