WebCompanionInstaller[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

WebCompanionInstaller.exe
Size

451KB
MD5

e5a8f7b2c1a8790f97e54b059eca3e22
SHA1

146b3eb8e059b6d9f12172a60b5bc5ca7ca66989
SHA256

cda0774e502ebe82ba67df1c8109f791416492bef520dce5b3e5b520e620f3b1
SHA512

33d433c6f161899ae590c2274614d63b2d289c61638f47c2d57f205ad578d435a066fe5f25e1a8ae6616350013747360e2d99b743970fcc5187db5404a2888c7
SSDEEP

6144:ZzsbWuMUgI6kGwOFVVw/c/1q26nQuAa+iZKY619WveNL1EApFV9f1aiVtZkyK/ZY:Zzn0vkzVw/c/g26nF619WA1EApF/VZaa

Score

N/A

Malware Config

Signatures

Files

WebCompanionInstaller.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4a:53:8c:28
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

07-07-2009 17:25

Not After

07-12-2030 17:55

Subject

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10-06-2015 13:42

Not After

10-11-2030 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:1e:c2:1a:e9:8a:b2:9e:1c:15:e3:84:f1:31:10:11
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

19-03-2021 14:11

Not After

19-03-2022 14:11

Subject

SERIALNUMBER=709505-8,CN=Lavasoft Software Canada Inc.,O=Lavasoft Software Canada Inc.,L=Saint-Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:27:6b:0b:b4:f2:17:af:47:cf:24:c9:c5:2c:38:5d:61:5b:91:f9:1f:98:d8:94:57:f3:d6:78:62:b9:3f:c3
Signer

Actual PE Digest

ed:27:6b:0b:b4:f2:17:af:47:cf:24:c9:c5:2c:38:5d:61:5b:91:f9:1f:98:d8:94:57:f3:d6:78:62:b9:3f:c3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=709505-8,CN=Lavasoft Software Canada Inc.,O=Lavasoft Software Canada Inc.,L=Saint-Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

10-11-2021 11:32
Valid: true

Chain 1

SERIALNUMBER=709505-8,CN=Lavasoft Software Canada Inc.,O=Lavasoft Software Canada Inc.,L=Saint-Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4a:53:8c:28Certificate

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

1b:1e:c2:1a:e9:8a:b2:9e:1c:15:e3:84:f1:31:10:11Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ed:27:6b:0b:b4:f2:17:af:47:cf:24:c9:c5:2c:38:5d:61:5b:91:f9:1f:98:d8:94:57:f3:d6:78:62:b9:3f:c3Signer

Signature Validations

Verification

10-11-2021 11:32 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 414KB - Virtual size: 413KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 512B - Virtual size: 12B

4a:53:8c:28
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

1b:1e:c2:1a:e9:8a:b2:9e:1c:15:e3:84:f1:31:10:11
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ed:27:6b:0b:b4:f2:17:af:47:cf:24:c9:c5:2c:38:5d:61:5b:91:f9:1f:98:d8:94:57:f3:d6:78:62:b9:3f:c3
Signer

10-11-2021 11:32
Valid: true

.text
Size: 414KB - Virtual size: 413KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 512B - Virtual size: 12B