4b3cd86412200b6b972f89406406626548fc5179568c71ec3e82953a7adac637

Sharing

Copy URL Twitter E-mail

General

Target

4b3cd86412200b6b972f89406406626548fc5179568c71ec3e82953a7adac637
Size

2.4MB
MD5

9b1e3bcd2b551f134b948920842b8bdd
SHA1

f15e15e7779da1b7ae73a8bb1cc2d5b821eba2a6
SHA256

4b3cd86412200b6b972f89406406626548fc5179568c71ec3e82953a7adac637
SHA512

a342cb3d1950467e33c102225f68d7e9336675436732730a73778374c6eaff97ea4d60e951c9370c5fd943979943128e3d53f61b4af8cb780f02cc4284856fe0
SSDEEP

49152:O9tW0tixsKrhHdUhLfA7qrYN8Bfg+aJLQTFVUO+Pam6l1odP/dsqQ:otWPsKrh9+fA7qcaOdsTXUO+PaiPFsqQ

Score

N/A

Malware Config

Signatures

Files

4b3cd86412200b6b972f89406406626548fc5179568c71ec3e82953a7adac637
.exe windows x86

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:dd:93:f3:ac:65:2f:95:4c:79:5b:59:39:55:88:7e:31
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

05/11/2013, 16:27

Not After

06/11/2014, 16:27

Subject

CN=Tuto4PC.com,O=Tuto4PC.com,L=Paris,ST=Ile-De-France,C=FR,1.2.840.113549.1.9.1=#0c13636f6e74616374407475746f3470632e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

83:8f:96:9f:80:fb:1c:d6:fb:96:b0:e7:01:0a:51:c5:99:8e:18:f7
Signer

Actual PE Digest

83:8f:96:9f:80:fb:1c:d6:fb:96:b0:e7:01:0a:51:c5:99:8e:18:f7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Tuto4PC.com,O=Tuto4PC.com,L=Paris,ST=Ile-De-France,C=FR,1.2.840.113549.1.9.1=#0c13636f6e74616374407475746f3470632e636f6d

17/11/2022, 13:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:dd:93:f3:ac:65:2f:95:4c:79:5b:59:39:55:88:7e:31Certificate

Extended Key Usages

Key Usages

83:8f:96:9f:80:fb:1c:d6:fb:96:b0:e7:01:0a:51:c5:99:8e:18:f7Signer

Signature Validations

Verification

17/11/2022, 13:15 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:dd:93:f3:ac:65:2f:95:4c:79:5b:59:39:55:88:7e:31
Certificate

83:8f:96:9f:80:fb:1c:d6:fb:96:b0:e7:01:0a:51:c5:99:8e:18:f7
Signer

17/11/2022, 13:15
Valid: false

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB