afe9e056dec666888ebb0bfbb39598c2f9af9e2fab63f5521cd65fd1083d7e4e

Sharing

Copy URL Twitter E-mail

General

Target

afe9e056dec666888ebb0bfbb39598c2f9af9e2fab63f5521cd65fd1083d7e4e
Size

299KB
MD5

071431b75115bbed6883dba7ddebd104
SHA1

3f9110fb61f1d7a67b8c29638e9031adfafe870d
SHA256

afe9e056dec666888ebb0bfbb39598c2f9af9e2fab63f5521cd65fd1083d7e4e
SHA512

91095b750ee1af35a847e789659706e5e6d561cab20745e400e2b9f6ce67895252b178eb1ad6be9ac750d6f63bf8f8fbcc7c1b727f8c91f613bc54e1c8e188b9
SSDEEP

6144:GGjVdieM+FmP9spFsGedetnP7k9UYCiq7MCzYypj5ls:HirZ9jdcP75YCi0X3pj5ls

Score

N/A

Malware Config

Signatures

Files

afe9e056dec666888ebb0bfbb39598c2f9af9e2fab63f5521cd65fd1083d7e4e
.exe windows x86

d9035f7f7b589f6a5b3fa10c446cb5de

Code Sign

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/07/2013, 00:00

Not After

24/07/2016, 23:59

Subject

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8e:19:cf:0b:28:26:df:dd:f0:00:35:38:1c:cc:6e:f8:5b:00:39:71
Signer

Actual PE Digest

8e:19:cf:0b:28:26:df:dd:f0:00:35:38:1c:cc:6e:f8:5b:00:39:71

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
LocalAlloc
CreateFileMappingW

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9035f7f7b589f6a5b3fa10c446cb5de

Code Sign

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9Certificate

Extended Key Usages

Key Usages

8e:19:cf:0b:28:26:df:dd:f0:00:35:38:1c:cc:6e:f8:5b:00:39:71Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 21KB - Virtual size: 32KB

.data2 Size: 33KB - Virtual size: 33KB

.data3 Size: 41KB - Virtual size: 41KB

.data1 Size: 41KB - Virtual size: 40KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 1KB - Virtual size: 1KB

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9
Certificate

8e:19:cf:0b:28:26:df:dd:f0:00:35:38:1c:cc:6e:f8:5b:00:39:71
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 21KB - Virtual size: 32KB

.data2
Size: 33KB - Virtual size: 33KB

.data3
Size: 41KB - Virtual size: 41KB

.data1
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 1KB - Virtual size: 1KB