e538f6f1a1274a9ae1bee5c8c80bfe52617776b79ccb59161b6494eef096ac86

Sharing

Copy URL Twitter E-mail

General

Target

e538f6f1a1274a9ae1bee5c8c80bfe52617776b79ccb59161b6494eef096ac86
Size

958KB
MD5

0d9a39d42ff9af06a4357589aa8ae2c0
SHA1

ee113dbbd2f2bb411d78d42bb9fdba39b5d92861
SHA256

e538f6f1a1274a9ae1bee5c8c80bfe52617776b79ccb59161b6494eef096ac86
SHA512

bbc43a2c77a22156e7c8b302f4ec2bbc72d3572a788f0491409cabf3af00cee476ca2d93ef0f6ef9f64588a64ba11e8d3d676cf6671fedd3c4514f4c97d1770f
SSDEEP

24576:z5YIOidfi79JjBqW5QJCYMZltEklWhsVJY3+yvD:zuDidm3qCPZltvlMwq3+yb

Score

N/A

Malware Config

Signatures

Files

e538f6f1a1274a9ae1bee5c8c80bfe52617776b79ccb59161b6494eef096ac86
.exe windows x86

Code Sign

3f:af:bb:c1:a3:d7:7d:a1:a7:44:a0:d2:ee:29:67:41
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/12/2014, 00:00

Not After

22/12/2015, 23:59

Subject

CN=Geokta,O=Geokta,POSTALCODE=105187,STREET=Tkatchkaya 1,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

eb:bc:4b:e2:98:9c:e2:d7:08:af:12:df:05:68:2e:ff:cd:00:ea:4d
Signer

Actual PE Digest

eb:bc:4b:e2:98:9c:e2:d7:08:af:12:df:05:68:2e:ff:cd:00:ea:4d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Geokta,O=Geokta,POSTALCODE=105187,STREET=Tkatchkaya 1,L=Moscow,ST=Moscow,C=RU

04/11/2022, 15:40
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

3f:af:bb:c1:a3:d7:7d:a1:a7:44:a0:d2:ee:29:67:41Certificate

Extended Key Usages

Key Usages

eb:bc:4b:e2:98:9c:e2:d7:08:af:12:df:05:68:2e:ff:cd:00:ea:4dSigner

Signature Validations

Verification

04/11/2022, 15:40 Valid: false

Headers

File Characteristics

Sections

CODE Size: 648KB - Virtual size: 648KB

DATA Size: 17KB - Virtual size: 16KB

BSS Size: - Virtual size: 5KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 28B

.rdata Size: 512B - Virtual size: 24B

.text Size: 137KB - Virtual size: 137KB

.reloc Size: 53KB - Virtual size: 53KB

.rsrc Size: 85KB - Virtual size: 84KB

3f:af:bb:c1:a3:d7:7d:a1:a7:44:a0:d2:ee:29:67:41
Certificate

eb:bc:4b:e2:98:9c:e2:d7:08:af:12:df:05:68:2e:ff:cd:00:ea:4d
Signer

04/11/2022, 15:40
Valid: false

CODE
Size: 648KB - Virtual size: 648KB

DATA
Size: 17KB - Virtual size: 16KB

BSS
Size: - Virtual size: 5KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 28B

.rdata
Size: 512B - Virtual size: 24B

.text
Size: 137KB - Virtual size: 137KB

.reloc
Size: 53KB - Virtual size: 53KB

.rsrc
Size: 85KB - Virtual size: 84KB