c93bb8fd042b9416b80b7894aa16969f2cefdbf4734157d5d16d7acdf87a4c89

Sharing

Copy URL Twitter E-mail

General

Target

c93bb8fd042b9416b80b7894aa16969f2cefdbf4734157d5d16d7acdf87a4c89
Size

2.0MB
MD5

c26bda317a4d099db4869068a29d97fe
SHA1

73665e3275220fa279a3c7a5afd9fcd024beb733
SHA256

c93bb8fd042b9416b80b7894aa16969f2cefdbf4734157d5d16d7acdf87a4c89
SHA512

d0977c2725199ccf5001e5fbf41d69d3fa9bacaba605d16b2e611f9cbfb7276301dc6b81f971e026ca51dfae17e16fe09df3c56ba77346c944699aefb04d3b3c
SSDEEP

24576:v3K6FCX4OXos8SbJ0i9ldrGD9CwJHFnvPzP64QWDTz:vKh5GO0ifC9ztFnvPzA6

Score

N/A

Malware Config

Signatures

Files

c93bb8fd042b9416b80b7894aa16969f2cefdbf4734157d5d16d7acdf87a4c89
.dll windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:94:7f:07:6d:de:97:df:55:ee:fb:fe:d0:04:a0:37
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/02/2014, 00:00

Not After

17/02/2016, 23:59

Subject

CN=Media Codecs Interactive LLC,O=Media Codecs Interactive LLC,POSTALCODE=19808,STREET=2711 Centerville Road\, Suite 400,L=Wilmington,ST=Delaware,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/05/2013, 00:00

Not After

04/06/2014, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:ad:51:f9:d3:f5:28:e2:9e:94:b9:6f:7d:40:9b:c4:a4:bc:6f:8a
Signer

Actual PE Digest

62:ad:51:f9:d3:f5:28:e2:9e:94:b9:6f:7d:40:9b:c4:a4:bc:6f:8a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Media Codecs Interactive LLC,O=Media Codecs Interactive LLC,POSTALCODE=19808,STREET=2711 Centerville Road\, Suite 400,L=Wilmington,ST=Delaware,C=US

29/05/2014, 17:30
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tscuwerc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kgrsvpdv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

63:94:7f:07:6d:de:97:df:55:ee:fb:fe:d0:04:a0:37Certificate

Extended Key Usages

Key Usages

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

62:ad:51:f9:d3:f5:28:e2:9e:94:b9:6f:7d:40:9b:c4:a4:bc:6f:8aSigner

Signature Validations

Verification

29/05/2014, 17:30 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 108KB - Virtual size: 108KB

.rsrc Size: - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

tscuwerc Size: 1.9MB - Virtual size: 1.9MB

kgrsvpdv Size: 512B - Virtual size: 4KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

63:94:7f:07:6d:de:97:df:55:ee:fb:fe:d0:04:a0:37
Certificate

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

62:ad:51:f9:d3:f5:28:e2:9e:94:b9:6f:7d:40:9b:c4:a4:bc:6f:8a
Signer

29/05/2014, 17:30
Valid: false

.rsrc
Size: - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

tscuwerc
Size: 1.9MB - Virtual size: 1.9MB

kgrsvpdv
Size: 512B - Virtual size: 4KB