InSpectre[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

InSpectre.exe
Size

125KB
MD5

70bbd36e5b81abcc423bb0acd3de525b
SHA1

0706fa5efc794f0dbd678bac053ba8bf12272ff0
SHA256

3ac3cfe5ccbbc8c30d812cecb8b96357b377535842d9ba67a4d0b1fa3636c9c2
SHA512

fb3d574c76eb6c659892e87be7b546e63bcd8c8c266430efc5d52e45c86d198cfa9e11a531ef6742d9cb1cf22e6b4caacbc0e7490ebe0962b9433cd92f6c6ebc
SSDEEP

3072:VxxPGrlqO+NDWQ+WMqoQpFWzqSlxmWHwC:HUrrQ+WMMFWzqSnlwC

Score

N/A

Malware Config

Signatures

Files

InSpectre.exe
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:1c:39:70:0c:9e:31:7d:9e:f5:2c:b7:7d:6a:c3:e7
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/03/2016, 00:00

Not After

02/04/2019, 12:00

Subject

CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:28:56:1d:91:eb:6b:1c:c6:8e:84:91:fc:58:74:1a:58:35:74:54
Signer

Actual PE Digest

89:28:56:1d:91:eb:6b:1c:c6:8e:84:91:fc:58:74:1a:58:35:74:54

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US

11/04/2018, 18:15
Valid: true

Chain 1

CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 17KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

04:1c:39:70:0c:9e:31:7d:9e:f5:2c:b7:7d:6a:c3:e7Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

89:28:56:1d:91:eb:6b:1c:c6:8e:84:91:fc:58:74:1a:58:35:74:54Signer

Signature Validations

Verification

11/04/2018, 18:15 Valid: true

Chain 1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 17KB - Virtual size: 160KB

.rsrc Size: 100KB - Virtual size: 100KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

04:1c:39:70:0c:9e:31:7d:9e:f5:2c:b7:7d:6a:c3:e7
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

89:28:56:1d:91:eb:6b:1c:c6:8e:84:91:fc:58:74:1a:58:35:74:54
Signer

11/04/2018, 18:15
Valid: true

.text
Size: 17KB - Virtual size: 160KB

.rsrc
Size: 100KB - Virtual size: 100KB