Ashampoo_AntiSpy[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Ashampoo_AntiSpy.exe
Size

411KB
MD5

a8ce355fb6b17a5aa2134ec1b8370c28
SHA1

9920a3d9ac8b4b76b6f5d270c33399ee1b4dfbbf
SHA256

4edcffcfadb0af69c1563b05df9a33b1c2803f0a37db8fa73c8b172ea7e886f9
SHA512

9ced67db7308871005485206dfd95d9a3a2512d837e2df75958e010ee87dbf9f3ce57eda5a386a993958ab513ae0d34a7475f02088ba467b2fbbc2e0d0953f1e
SSDEEP

6144:HszdLR6iyYDXN8T04wFZw6TSzdLR6iQYDnw:M36qu04YS36F

Score

1^/10

Malware Config

Signatures

Files

Ashampoo_AntiSpy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

10:41:fd:bc:e2:d5:86:46:99:ab:f2:46:0d:65:bd:1c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/01/2017, 00:00

Not After

11/04/2020, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Niedersachsen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

bc:34:07:49:d6:32:88:d9:14:b1:37:d0:91:c6:2d:c5:d8:31:1f:96:28:62:ad:01:eb:6f:08:cb:f1:f6:bf:a4
Signer

Actual PE Digest

bc:34:07:49:d6:32:88:d9:14:b1:37:d0:91:c6:2d:c5:d8:31:1f:96:28:62:ad:01:eb:6f:08:cb:f1:f6:bf:a4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Niedersachsen,C=DE

19/04/2017, 12:36
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

10:41:fd:bc:e2:d5:86:46:99:ab:f2:46:0d:65:bd:1cCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

bc:34:07:49:d6:32:88:d9:14:b1:37:d0:91:c6:2d:c5:d8:31:1f:96:28:62:ad:01:eb:6f:08:cb:f1:f6:bf:a4Signer

Signature Validations

Verification

19/04/2017, 12:36 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 318KB - Virtual size: 318KB

.rsrc Size: 85KB - Virtual size: 85KB

.reloc Size: 512B - Virtual size: 12B

10:41:fd:bc:e2:d5:86:46:99:ab:f2:46:0d:65:bd:1c
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

bc:34:07:49:d6:32:88:d9:14:b1:37:d0:91:c6:2d:c5:d8:31:1f:96:28:62:ad:01:eb:6f:08:cb:f1:f6:bf:a4
Signer

19/04/2017, 12:36
Valid: false

.text
Size: 318KB - Virtual size: 318KB

.rsrc
Size: 85KB - Virtual size: 85KB

.reloc
Size: 512B - Virtual size: 12B