cb2e5d88032f1a8b32f7f7050335580e0af9d6d18b83fc709ee9ebaf22f3c45a

Sharing

Copy URL

Twitter E-mail

General

Target

cb2e5d88032f1a8b32f7f7050335580e0af9d6d18b83fc709ee9ebaf22f3c45a
Size

97KB
MD5

113b5c541bc1b23f3a34f88b546b4deb
SHA1

bc79538a2d97781a8a6cfa62ce1ff58d23bdbe09
SHA256

cb2e5d88032f1a8b32f7f7050335580e0af9d6d18b83fc709ee9ebaf22f3c45a
SHA512

51ae733cbc6ee0975dee75652117ffc0bc4f2ac4d558aec79e55db92756b631aca7f05f0a10af856ad602cb5664b1acf28cc3bb3432c36da5140679ea317d43b
SSDEEP

1536:90FusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prK2mVEhS:9GS4jHS8q/3nTzePCwNUh4E9hor

Score

N/A

Malware Config

Signatures

Files

cb2e5d88032f1a8b32f7f7050335580e0af9d6d18b83fc709ee9ebaf22f3c45a
.exe windows x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01-03-2011 01:07

Not After

01-03-2014 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ba:06:6e:96:4c:f0:67:98:bd:2c:f3:d9:83:e4:8a:d6:3d:97:ef:43
Signer

Actual PE Digest

ba:06:6e:96:4c:f0:67:98:bd:2c:f3:d9:83:e4:8a:d6:3d:97:ef:43

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

02-07-2012 05:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 87KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

ba:06:6e:96:4c:f0:67:98:bd:2c:f3:d9:83:e4:8a:d6:3d:97:ef:43Signer

Signature Validations

Verification

02-07-2012 05:35 Valid: false

Headers

File Characteristics

Sections

.nsp0 Size: - Virtual size: 208KB

.nsp1 Size: 87KB - Virtual size: 92KB

.nsp2 Size: 5KB - Virtual size: 4KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

55:21:db:26:ce:0c:b3:e4
Certificate

ba:06:6e:96:4c:f0:67:98:bd:2c:f3:d9:83:e4:8a:d6:3d:97:ef:43
Signer

02-07-2012 05:35
Valid: false

.nsp0
Size: - Virtual size: 208KB

.nsp1
Size: 87KB - Virtual size: 92KB

.nsp2
Size: 5KB - Virtual size: 4KB