WinLiveInfo[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

WinLiveInfo.exe
Size

3.7MB
MD5

91249d0c6b203c4a6def7ab8edac41cc
SHA1

3aadbbd2d056ac9cadb3f317740870021321b4f9
SHA256

c6a9038617d6ec64d4eab74f2a20481de4c5640fdb744ef60744986fff0cabb6
SHA512

429b4452d3ed4bd13bbb7ca723bc73850d395ac5e5c16c4bcde30270a4a71bcd77dc6ae808640de6c9dd32bad506eb68f5909ad63c41c43615967158c80dbb0c
SSDEEP

49152:x3IyPbAe2ORhMZLiJ6S+4tlmJBQV16sW2QsIs2:x3ICbb2II46z4tlmJBQVAsA

Score

1^/10

Malware Config

Signatures

Files

WinLiveInfo.exe
.exe windows x64

Code Sign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b8:e9:a2:14:3d:b3:17:cf:00:87:e3:f7:36:b4:16:05
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/02/2020, 00:00

Not After

19/02/2022, 23:59

Subject

CN=Katsavounidis Konstantinos,O=Katsavounidis Konstantinos,POSTALCODE=55535,STREET=32 Bizaniou Street,L=Pylaia,ST=Thessaloniki,C=GR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

01/02/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:18:78:83:ef:f4:3e:40:42:cc:c5:81:9a:05:b9:87
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:04

Not After

01/03/2032, 11:04

Subject

CN=Globalsign TSA for MS Authenticode advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b9:f8:82:4a:a9:37:a1:17:70:75:44:c4:2c:2d:12:df:6a:d0:62:77:71:27:f9:dc:fb:6d:58:5e:c2:b1:b1:ae
Signer

Actual PE Digest

b9:f8:82:4a:a9:37:a1:17:70:75:44:c4:2c:2d:12:df:6a:d0:62:77:71:27:f9:dc:fb:6d:58:5e:c2:b1:b1:ae

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Katsavounidis Konstantinos,O=Katsavounidis Konstantinos,POSTALCODE=55535,STREET=32 Bizaniou Street,L=Pylaia,ST=Thessaloniki,C=GR

26/05/2021, 17:52
Valid: true

Chain 1

CN=Katsavounidis Konstantinos,O=Katsavounidis Konstantinos,POSTALCODE=55535,STREET=32 Bizaniou Street,L=Pylaia,ST=Thessaloniki,C=GR

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

b8:e9:a2:14:3d:b3:17:cf:00:87:e3:f7:36:b4:16:05Certificate

Extended Key Usages

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2dCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:18:78:83:ef:f4:3e:40:42:cc:c5:81:9a:05:b9:87Certificate

Extended Key Usages

Key Usages

b9:f8:82:4a:a9:37:a1:17:70:75:44:c4:2c:2d:12:df:6a:d0:62:77:71:27:f9:dc:fb:6d:58:5e:c2:b1:b1:aeSigner

Signature Validations

Verification

26/05/2021, 17:52 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 94KB - Virtual size: 93KB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

04:00:00:00:00:01:21:58:53:08:a2
Certificate

b8:e9:a2:14:3d:b3:17:cf:00:87:e3:f7:36:b4:16:05
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:18:78:83:ef:f4:3e:40:42:cc:c5:81:9a:05:b9:87
Certificate

b9:f8:82:4a:a9:37:a1:17:70:75:44:c4:2c:2d:12:df:6a:d0:62:77:71:27:f9:dc:fb:6d:58:5e:c2:b1:b1:ae
Signer

26/05/2021, 17:52
Valid: true

.text
Size: 94KB - Virtual size: 93KB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB