50450284dddf6652952e09d995449edb7524e6e099826b766d767c9523c7e140[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

50450284dddf6652952e09d995449edb7524e6e099826b766d767c9523c7e140.zip
Size

102KB
MD5

c6a7a29d7c0570783b2254870af20854
SHA1

1883f6d5cdfb943be435b67596998ca6962facd7
SHA256

2a458efaeef20aa977f8e287282f4708b4419c66efb87b83a70d6120ef56cf6b
SHA512

27d797df9be0099d7e6ad157bf9475ab422de29dd0ead37baee9ef0bc7004a473af18deb6d22b7f344650c3a36614d52d6b9f21a25be139ff19917ff772f1dab
SSDEEP

3072:TNajJw6mbBCWTCmqG52QMmAfRlpPNSzBKsS/leUwhq:ZajJMBvTK1fH32E1wI

Score

N/A

Malware Config

Signatures

Files

50450284dddf6652952e09d995449edb7524e6e099826b766d767c9523c7e140.zip
.zip

Password: infected
50450284dddf6652952e09d995449edb7524e6e099826b766d767c9523c7e140
.exe windows x86

fc5e02dc060394965094520f6f077f2a

Code Sign

ac:94:e0:06:e7:02:80:4a:b5:8f:52:48:88:4f:37:38
Certificate

Issuer

CN=Schevertz,O=Svrtz,L=Bremen,ST=Bremen,C=DE,1.2.840.113549.1.9.1=#0c10737570704062726d6e7376747a2e6465

Not Before

03/09/2013, 00:00

Not After

02/09/2014, 23:59

Subject

CN=Schevertz,O=Svrtz,L=Bremen,ST=Bremen,C=DE,1.2.840.113549.1.9.1=#0c10737570704062726d6e7376747a2e6465

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

FillPath

kernel32

VirtualProtect

ntdll

RtlRandom

Sections

.text
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jers
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pers
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mers
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
50450284dddf6652952e09d995449edb7524e6e099826b766d767c9523c7e140_dump_0x00950000

Sharing

General

Malware Config

Signatures

Files

Password: infected

fc5e02dc060394965094520f6f077f2a

Code Sign

ac:94:e0:06:e7:02:80:4a:b5:8f:52:48:88:4f:37:38Certificate

Extended Key Usages

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

gdi32

kernel32

ntdll

Sections

.text Size: 1024B - Virtual size: 756B

.rdata Size: 512B - Virtual size: 204B

jers Size: 65KB - Virtual size: 65KB

pers Size: 512B - Virtual size: 128B

mers Size: 512B - Virtual size: 128B

ac:94:e0:06:e7:02:80:4a:b5:8f:52:48:88:4f:37:38
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

.text
Size: 1024B - Virtual size: 756B

.rdata
Size: 512B - Virtual size: 204B

jers
Size: 65KB - Virtual size: 65KB

pers
Size: 512B - Virtual size: 128B

mers
Size: 512B - Virtual size: 128B