magicvideo[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

magicvideo.exe
Size

716KB
MD5

0c866c569542d6a8275c6a00ddf41a37
SHA1

115bea9406688cf19c4a2c9700ac7008419dd17c
SHA256

9bbdddec18600d48a2b864b3a26096e4f610a3b496133a74303e8ddefbe1ee30
SHA512

042013ad523fbe2ed19c8f4a2659c6ffdf23ecf2ad2c424843f14f185557010f8e5ae44e13f48d409735c872831863deb000de44449a56e2ac945459d11508cd
SSDEEP

12288:2G3NoYQglT7BiIMxKDmfAOdSZ2GGx22M/XMmpFD0x:2G3NoildXDmK2M2OM2Ax

Score

1^/10

Malware Config

Signatures

Files

magicvideo.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:3a:8e:3f:ec:74:85:00:1f:f5:a5:20:4d:94:2d:ab
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

30/12/2019, 00:00

Not After

29/12/2020, 23:59

Subject

SERIALNUMBER=11882688,CN=BITBACK LIMITED,O=BITBACK LIMITED,POSTALCODE=CF10 1GS,STREET=13 Wharton Street,L=Cardiff,ST=South Glamorgan,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:d5:de:eb:5a:b3:e1:43:80:d8:1c:ad:6d:db:d2:2c:86:0a:c5:61
Signer

Actual PE Digest

79:d5:de:eb:5a:b3:e1:43:80:d8:1c:ad:6d:db:d2:2c:86:0a:c5:61

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=11882688,CN=BITBACK LIMITED,O=BITBACK LIMITED,POSTALCODE=CF10 1GS,STREET=13 Wharton Street,L=Cardiff,ST=South Glamorgan,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

04/02/2020, 22:22
Valid: true

Chain 1

SERIALNUMBER=11882688,CN=BITBACK LIMITED,O=BITBACK LIMITED,POSTALCODE=CF10 1GS,STREET=13 Wharton Street,L=Cardiff,ST=South Glamorgan,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

39:3a:8e:3f:ec:74:85:00:1f:f5:a5:20:4d:94:2d:abCertificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

79:d5:de:eb:5a:b3:e1:43:80:d8:1c:ad:6d:db:d2:2c:86:0a:c5:61Signer

Signature Validations

Verification

04/02/2020, 22:22 Valid: true

Chain 1

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 705KB - Virtual size: 705KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

39:3a:8e:3f:ec:74:85:00:1f:f5:a5:20:4d:94:2d:ab
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

79:d5:de:eb:5a:b3:e1:43:80:d8:1c:ad:6d:db:d2:2c:86:0a:c5:61
Signer

04/02/2020, 22:22
Valid: true

.text
Size: 705KB - Virtual size: 705KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B