2c00cba295b785774418a95004728a8766df8a89edd17dfa0b949d8b3b9ce294

Sharing

Copy URL Twitter E-mail

General

Target

2c00cba295b785774418a95004728a8766df8a89edd17dfa0b949d8b3b9ce294
Size

421KB
MD5

0776370846dfe1d108cbd098db162f35
SHA1

a4a16b4323b05f87e3b5d5de16665b175f99631f
SHA256

2c00cba295b785774418a95004728a8766df8a89edd17dfa0b949d8b3b9ce294
SHA512

28fde0239eeda2c60228875f6b5eeb12d82b56be34676dc528b32c0c8e222d1afd7aee9581e5b2035c4830e29594ecbab15d659592db10d54c897126e5888f86
SSDEEP

12288:n07V3qFOVnaSwj/AxvF1CSdRsf8UnoR695:LFmnaH4xHCSdbU

Score

N/A

Malware Config

Signatures

Files

2c00cba295b785774418a95004728a8766df8a89edd17dfa0b949d8b3b9ce294
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:fe
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fb
Certificate

Issuer

CN=COMODO Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/08/2011, 00:00

Not After

14/08/2016, 23:59

Subject

CN=wyDay,O=wyDay,POSTALCODE=03878,STREET=34 Pinewood Drive,L=Somersworth,ST=New Hampshire,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2f:5b:f5:5f:47:f5:7f:ee:3e:15:fd:52:0b:b6:5d:3e:40:e1:32:2e
Signer

Actual PE Digest

2f:5b:f5:5f:47:f5:7f:ee:3e:15:fd:52:0b:b6:5d:3e:40:e1:32:2e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=wyDay,O=wyDay,POSTALCODE=03878,STREET=34 Pinewood Drive,L=Somersworth,ST=New Hampshire,C=US

05/09/2012, 23:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 391KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:feCertificate

Key Usages

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fbCertificate

Extended Key Usages

Key Usages

2f:5b:f5:5f:47:f5:7f:ee:3e:15:fd:52:0b:b6:5d:3e:40:e1:32:2eSigner

Signature Validations

Verification

05/09/2012, 23:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 391KB - Virtual size: 391KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 12B

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

73:57:8c:71:6d:b3:95:53:13:7d:f3:09:73:18:ab:fe
Certificate

66:d3:28:8a:b6:91:7b:55:4e:af:36:2a:36:0e:8a:fb
Certificate

2f:5b:f5:5f:47:f5:7f:ee:3e:15:fd:52:0b:b6:5d:3e:40:e1:32:2e
Signer

05/09/2012, 23:04
Valid: false

.text
Size: 391KB - Virtual size: 391KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 12B