60c13dff9170811cc754de68a0b7e20305c57b104cabd5c99d88f02197466dd1

Sharing

Copy URL Twitter E-mail

General

Target

60c13dff9170811cc754de68a0b7e20305c57b104cabd5c99d88f02197466dd1
Size

309KB
MD5

239c93179bd359db73414eb6179a7b25
SHA1

321942018c50c7820bf5da9df868982ca1e961a2
SHA256

60c13dff9170811cc754de68a0b7e20305c57b104cabd5c99d88f02197466dd1
SHA512

0fd050aceea6ce3a84f749a881f78c52fa6f3a0ba1ae344137865b116e4666a8bf460b4407dd5ae182c0633fe91d532abbfa50a2c85542e6219be4c41dcb7de9
SSDEEP

6144:nK6hQ8NPS8qgZbuljNxPMgKiguw6UDGFZyZsPVZBPdVqgHUn1HnLMTTTTTTd:xagPS8qgZbuJ0Ww6++YsvBPdVx0n1Hy

Score

N/A

Malware Config

Signatures

Files

60c13dff9170811cc754de68a0b7e20305c57b104cabd5c99d88f02197466dd1
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

64:fe:29:dc:cf:38:e0:30:dc:ff:e3:4d:05:68:96:61
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

03/03/2009, 12:53

Not After

03/03/2024, 12:53

Subject

CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:90:f6:e9:bf:c6:54:7d:58:f6:a2:fa:0b:3a:fb:17
Certificate

Issuer

CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08/12/2014, 09:03

Not After

08/12/2015, 09:03

Subject

CN=Open Source Developer\, Tim Kosse,O=FileZilla Open Source Project,C=DE,1.2.840.113549.1.9.1=#0c1f74696d2e6b6f7373654066696c657a696c6c612d70726f6a6563742e6f7267

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:7a:55
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

03/03/2009, 12:58

Not After

03/03/2024, 12:58

Subject

CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

51:60:5b:7a:13:af:ee:0a:c4:0e:c4:6f:1b:b6:2e:3b:2a:9f:f9:7f
Signer

Actual PE Digest

51:60:5b:7a:13:af:ee:0a:c4:0e:c4:6f:1b:b6:2e:3b:2a:9f:f9:7f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Open Source Developer\, Tim Kosse,O=FileZilla Open Source Project,C=DE,1.2.840.113549.1.9.1=#0c1f74696d2e6b6f7373654066696c657a696c6c612d70726f6a6563742e6f7267

02/03/2015, 20:30
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

64:fe:29:dc:cf:38:e0:30:dc:ff:e3:4d:05:68:96:61Certificate

Key Usages

4a:90:f6:e9:bf:c6:54:7d:58:f6:a2:fa:0b:3a:fb:17Certificate

Extended Key Usages

Key Usages

04:7a:55Certificate

Extended Key Usages

51:60:5b:7a:13:af:ee:0a:c4:0e:c4:6f:1b:b6:2e:3b:2a:9f:f9:7fSigner

Signature Validations

Verification

02/03/2015, 20:30 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 288KB - Virtual size: 288KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 12B

64:fe:29:dc:cf:38:e0:30:dc:ff:e3:4d:05:68:96:61
Certificate

4a:90:f6:e9:bf:c6:54:7d:58:f6:a2:fa:0b:3a:fb:17
Certificate

04:7a:55
Certificate

51:60:5b:7a:13:af:ee:0a:c4:0e:c4:6f:1b:b6:2e:3b:2a:9f:f9:7f
Signer

02/03/2015, 20:30
Valid: false

.text
Size: 288KB - Virtual size: 288KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 12B