9c99a67e3d6663a2200614fbc820d0e8c26c2df18b60322df9dca70a4671f892

Sharing

Copy URL

Twitter E-mail

General

Target

9c99a67e3d6663a2200614fbc820d0e8c26c2df18b60322df9dca70a4671f892
Size

1.2MB
MD5

7f757b890f00981ba720fb18a70ec331
SHA1

b29418c57078dfe70f964db6aae3b784806620bd
SHA256

9c99a67e3d6663a2200614fbc820d0e8c26c2df18b60322df9dca70a4671f892
SHA512

ce83b3e6e1d20a5877c8353776759c5bfb58799676c4d4cac2030a3a145b0e8b151f7a6881ce138a2ed0000475c0631e5414ce2f0a1967732fc9e2fe4fee82dc
SSDEEP

24576:Wwu5dPvzle/G7U521q0LkFUuqsI/TOJCRXHJ71ELjb93NU6Fj:MdXzleO7r0Cki4uZ92BdzB

Score

N/A

Malware Config

Signatures

Files

9c99a67e3d6663a2200614fbc820d0e8c26c2df18b60322df9dca70a4671f892
.exe windows x86

Code Sign

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2011 20:42

Not After

25-10-2012 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:03:05:56:00:00:00:00:00:10
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14-02-2011 21:11

Not After

14-05-2012 21:11

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

17:ab:b8:c1:a0:dd:4e:87:d7:a8:d5:33:e0:0f:bb:3f:ac:e5:57:74
Signer

Actual PE Digest

17:ab:b8:c1:a0:dd:4e:87:d7:a8:d5:33:e0:0f:bb:3f:ac:e5:57:74

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

14-01-2012 07:27
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 888KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEIPSE
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEIDP
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGECONS
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

61:05:13:36:00:00:00:00:00:1aCertificate

Extended Key Usages

61:03:05:56:00:00:00:00:00:10Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:07:02:dc:00:00:00:00:00:0bCertificate

Extended Key Usages

Key Usages

17:ab:b8:c1:a0:dd:4e:87:d7:a8:d5:33:e0:0f:bb:3f:ac:e5:57:74Signer

Signature Validations

Verification

14-01-2012 07:27 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 888KB - Virtual size: 888KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 31KB - Virtual size: 78KB

PAGE Size: 9KB - Virtual size: 8KB

PAGEIPSE Size: 82KB - Virtual size: 81KB

PAGEIDP Size: 10KB - Virtual size: 9KB

PAGECONS Size: 512B - Virtual size: 120B

INIT Size: 19KB - Virtual size: 18KB

.rsrc Size: 127KB - Virtual size: 126KB

.reloc Size: 41KB - Virtual size: 41KB

61:05:13:36:00:00:00:00:00:1a
Certificate

61:03:05:56:00:00:00:00:00:10
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:07:02:dc:00:00:00:00:00:0b
Certificate

17:ab:b8:c1:a0:dd:4e:87:d7:a8:d5:33:e0:0f:bb:3f:ac:e5:57:74
Signer

14-01-2012 07:27
Valid: false

.text
Size: 888KB - Virtual size: 888KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 31KB - Virtual size: 78KB

PAGE
Size: 9KB - Virtual size: 8KB

PAGEIPSE
Size: 82KB - Virtual size: 81KB

PAGEIDP
Size: 10KB - Virtual size: 9KB

PAGECONS
Size: 512B - Virtual size: 120B

INIT
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 127KB - Virtual size: 126KB

.reloc
Size: 41KB - Virtual size: 41KB