aaf4ee07223fd8a85145a94af680b17c4abf44745ba66e11de9f46a36b9a0b1d

Sharing

Copy URL

Twitter E-mail

General

Target

aaf4ee07223fd8a85145a94af680b17c4abf44745ba66e11de9f46a36b9a0b1d
Size

582KB
MD5

81fdff3ae27c77342e9ae9c4b3630d00
SHA1

4af7522f01117de3f6941327389c0ba9cee22806
SHA256

aaf4ee07223fd8a85145a94af680b17c4abf44745ba66e11de9f46a36b9a0b1d
SHA512

d04db1ea9f6b73a38a2f651361460c866a275261fd18d13b47906032f8deee1dfca8ff39087fcf4e74739d32952bd13aeafa81bfbf2c0113f2cb5bb32493a450
SSDEEP

12288:qj5zz0yvLGl8FvxLtjJ3QyNcBDo888888888888W88888888888H0E:sUWGloxL3NcBq0E

Score

N/A

Malware Config

Signatures

Files

aaf4ee07223fd8a85145a94af680b17c4abf44745ba66e11de9f46a36b9a0b1d
.exe windows x86

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19-01-2010 00:00

Not After

18-01-2038 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7d
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-08-2015 00:00

Not After

09-08-2016 23:59

Subject

CN=OOO \"PERVAYA LIGA\",O=OOO \"PERVAYA LIGA\",POSTALCODE=197110,STREET=PETROVSKAYA KOSA\, 9,L=Saint-Petersburg,ST=Saint-Petersburg,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

24:92:2e:62:18:42:9c:a8:85:da:2a:e0:9a:4d:00:be:f9:94:8a:03
Signer

Actual PE Digest

24:92:2e:62:18:42:9c:a8:85:da:2a:e0:9a:4d:00:be:f9:94:8a:03

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=OOO \"PERVAYA LIGA\",O=OOO \"PERVAYA LIGA\",POSTALCODE=197110,STREET=PETROVSKAYA KOSA\, 9,L=Saint-Petersburg,ST=Saint-Petersburg,C=US

18-10-2022 20:51
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7dCertificate

Extended Key Usages

Key Usages

24:92:2e:62:18:42:9c:a8:85:da:2a:e0:9a:4d:00:be:f9:94:8a:03Signer

Signature Validations

Verification

18-10-2022 20:51 Valid: false

Headers

File Characteristics

Sections

CODE Size: 433KB - Virtual size: 433KB

DATA Size: 9KB - Virtual size: 8KB

BSS Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.text0 Size: 56KB - Virtual size: 55KB

.reloc Size: 7KB - Virtual size: 7KB

.rsrc Size: 69KB - Virtual size: 68KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7d
Certificate

24:92:2e:62:18:42:9c:a8:85:da:2a:e0:9a:4d:00:be:f9:94:8a:03
Signer

18-10-2022 20:51
Valid: false

CODE
Size: 433KB - Virtual size: 433KB

DATA
Size: 9KB - Virtual size: 8KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.text0
Size: 56KB - Virtual size: 55KB

.reloc
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 69KB - Virtual size: 68KB