aa71c676499260ed07b6b0e54aff155ad8e46b49aee933e90b5ff4dd098aadb6

Sharing

Copy URL Twitter E-mail

General

Target

aa71c676499260ed07b6b0e54aff155ad8e46b49aee933e90b5ff4dd098aadb6
Size

434KB
MD5

37c753d5ab2dba14e7b7e1dc56b87c27
SHA1

d6dfd70d391c4814ce8c4f2e8bf0c41e7deed1ee
SHA256

aa71c676499260ed07b6b0e54aff155ad8e46b49aee933e90b5ff4dd098aadb6
SHA512

0c96bfad6192c6a6d652ff7d4bd93bb13d7fd27e6ccc9a6200c235c833e5340d8e6d8f10937396a9c39b06dbb41a27348d031d55e3b8baa50cdcacaaffff41db
SSDEEP

6144:YFnJRm+efxgsQWc2m8snsIa9rRLKX5Z1BfZ9e58UoEFXtf79VMUHZZgBRflKXB:YFnXmrsWcRIKf1sNo+gUHZmVsR

Score

N/A

Malware Config

Signatures

Files

aa71c676499260ed07b6b0e54aff155ad8e46b49aee933e90b5ff4dd098aadb6
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:fe
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fb
Certificate

Issuer

CN=COMODO Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/08/2011, 00:00

Not After

14/08/2016, 23:59

Subject

CN=wyDay,O=wyDay,POSTALCODE=03878,STREET=34 Pinewood Drive,L=Somersworth,ST=New Hampshire,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

67:12:ac:82:0d:ca:36:7f:ec:3c:7f:7a:ea:fe:4f:1b:d1:29:a3:22
Signer

Actual PE Digest

67:12:ac:82:0d:ca:36:7f:ec:3c:7f:7a:ea:fe:4f:1b:d1:29:a3:22

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=wyDay,O=wyDay,POSTALCODE=03878,STREET=34 Pinewood Drive,L=Somersworth,ST=New Hampshire,C=US

05/09/2012, 23:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:feCertificate

Key Usages

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fbCertificate

Extended Key Usages

Key Usages

67:12:ac:82:0d:ca:36:7f:ec:3c:7f:7a:ea:fe:4f:1b:d1:29:a3:22Signer

Signature Validations

Verification

05/09/2012, 23:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 404KB - Virtual size: 404KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 12B

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:fe
Certificate

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fb
Certificate

67:12:ac:82:0d:ca:36:7f:ec:3c:7f:7a:ea:fe:4f:1b:d1:29:a3:22
Signer

05/09/2012, 23:04
Valid: false

.text
Size: 404KB - Virtual size: 404KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 12B