f65f2fe1460f1ef03e38e16c76aa0f6b906376b70c0eaed79c7c268e1c03d44e

Sharing

Copy URL Twitter E-mail

General

Target

f65f2fe1460f1ef03e38e16c76aa0f6b906376b70c0eaed79c7c268e1c03d44e
Size

434KB
MD5

0ae90bf5d684e7298785f6749d0a3452
SHA1

e9b9e0af497b05a584a074df3bbff49f89c28311
SHA256

f65f2fe1460f1ef03e38e16c76aa0f6b906376b70c0eaed79c7c268e1c03d44e
SHA512

2fed87119fd996d5315dd1981a5e4a93896689e0b91494a5d3051eb9158addc12d5498e620a19b03c1d41a2846f6fc3e9964ba39cae77537bd3f813ae8068baa
SSDEEP

6144:jSo8yPHZ7RvNfHPXDGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGo:jSo8K7RZHno

Score

N/A

Malware Config

Signatures

Files

f65f2fe1460f1ef03e38e16c76aa0f6b906376b70c0eaed79c7c268e1c03d44e
.exe windows x86

Code Sign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:1e:a1:b4:32:1e:16:1a:80:ea:4a:6e:34:c1:4d:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

19/09/2008, 00:00

Not After

19/09/2010, 23:59

Subject

CN=Antiy Technology Co. Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Antiy Technology Co. Ltd,L=Harbin,ST=Heilongjiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2a:9a:31:29:01:23:85:31:8a:40:03:b6:81:fe:20:bb:11:ef:bc:e6
Signer

Actual PE Digest

2a:9a:31:29:01:23:85:31:8a:40:03:b6:81:fe:20:bb:11:ef:bc:e6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Antiy Technology Co. Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Antiy Technology Co. Ltd,L=Harbin,ST=Heilongjiang,C=CN

04/03/2009, 07:24
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 110KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

10:1e:a1:b4:32:1e:16:1a:80:ea:4a:6e:34:c1:4d:d4Certificate

Extended Key Usages

Key Usages

2a:9a:31:29:01:23:85:31:8a:40:03:b6:81:fe:20:bb:11:ef:bc:e6Signer

Signature Validations

Verification

04/03/2009, 07:24 Valid: false

Headers

File Characteristics

Sections

.text Size: 110KB - Virtual size: 216KB

.rdata Size: 19KB - Virtual size: 64KB

.data Size: 3KB - Virtual size: 28KB

.rsrc Size: 7KB - Virtual size: 300KB

.aspack Size: 288KB - Virtual size: 288KB

.adata Size: - Virtual size: 4KB

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

10:1e:a1:b4:32:1e:16:1a:80:ea:4a:6e:34:c1:4d:d4
Certificate

2a:9a:31:29:01:23:85:31:8a:40:03:b6:81:fe:20:bb:11:ef:bc:e6
Signer

04/03/2009, 07:24
Valid: false

.text
Size: 110KB - Virtual size: 216KB

.rdata
Size: 19KB - Virtual size: 64KB

.data
Size: 3KB - Virtual size: 28KB

.rsrc
Size: 7KB - Virtual size: 300KB

.aspack
Size: 288KB - Virtual size: 288KB

.adata
Size: - Virtual size: 4KB