148376f36409f251fb9b9a1b37f28eeb1471b8d4daa6807b7d5ad252a2f39af0

Sharing

Copy URL Twitter E-mail

General

Target

148376f36409f251fb9b9a1b37f28eeb1471b8d4daa6807b7d5ad252a2f39af0
Size

188KB
MD5

a1d1d94e3518674443d05a4e4c4c47e0
SHA1

4a4341304c1483cf88270f5f7a04178de032480a
SHA256

148376f36409f251fb9b9a1b37f28eeb1471b8d4daa6807b7d5ad252a2f39af0
SHA512

cd5691489fd9699a974dc26ee3d375de3f5b1ada39f1c330da72f82fabece93d24c8f666ea675c08b58c6e2efeb83f0ef04c101a5bfb72e0db92d74ac6a326c4
SSDEEP

3072:QltrDTti5zBW7HE2f2DZnvokxVXHp0LCDdoWD4Jergh7M6WKaZ:0JUxBW7HEvDZvo8XHOCDdoWHgjWf

Score

N/A

Malware Config

Signatures

Files

148376f36409f251fb9b9a1b37f28eeb1471b8d4daa6807b7d5ad252a2f39af0
.exe windows x86

29637e11e194dc0202df96c219ccfc7d

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

21:dc:13:93:c2:03:f2:aa:40:3a:74:49:69:30:b7:8e
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2011-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)2011,O=VeriSign Inc.,C=US

Not Before

17/11/2011, 04:54

Not After

17/11/2511, 05:01

Subject

CN=VeriSign Class 3 Code Signing 2011-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)2011,O=VeriSign Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:b3:24:83:8b:d4:fc:01:15:92:ce:df:01:ee:a2:bc:58:62:ad:b8
Signer

Actual PE Digest

79:b3:24:83:8b:d4:fc:01:15:92:ce:df:01:ee:a2:bc:58:62:ad:b8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=VeriSign Class 3 Code Signing 2011-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)2011,O=VeriSign Inc.,C=US

06/02/2015, 10:40
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
GetStringTypeA
LCMapStringW
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29637e11e194dc0202df96c219ccfc7d

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

21:dc:13:93:c2:03:f2:aa:40:3a:74:49:69:30:b7:8eCertificate

Key Usages

79:b3:24:83:8b:d4:fc:01:15:92:ce:df:01:ee:a2:bc:58:62:ad:b8Signer

Signature Validations

Verification

06/02/2015, 10:40 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 161KB - Virtual size: 162KB

.rsrc Size: 2KB - Virtual size: 1KB

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

21:dc:13:93:c2:03:f2:aa:40:3a:74:49:69:30:b7:8e
Certificate

79:b3:24:83:8b:d4:fc:01:15:92:ce:df:01:ee:a2:bc:58:62:ad:b8
Signer

06/02/2015, 10:40
Valid: false

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 161KB - Virtual size: 162KB

.rsrc
Size: 2KB - Virtual size: 1KB