Cricket 4G Broadband Boltz[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Cricket 4G Broadband Boltz.exe
Size

653KB
MD5

2674331da7130c1d040c39e24e508fd3
SHA1

7a517011e1c91bc68af883abaa2cdd749db00ccd
SHA256

44a42bbb5a67fc05915d52818f1d502a2caf1e89b8bf8cdd6726a1fbc37a9405
SHA512

c768a973cd57dc0310cff695529a26da238b095113eb6b96e4b2d8be45982b5fb948ec3f87b1fa46b54bd47478b186eeec14e2f642bafe9bd466e64a8a4ac00b
SSDEEP

6144:zjRRcxrc2aFrpLUgZZypWK53taPJuiK6NRLFz:vqc2ad34tMui1LFz

Score

1^/10

Malware Config

Signatures

Files

Cricket 4G Broadband Boltz.exe
.exe windows x86

d8e1731fed3a7e621977394203b8ebdd

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:ea:45:6d:d0:a9:c3:b3:a0:dd:7b:d8:60:de:0b:55
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/07/2009, 00:00

Not After

29/07/2012, 23:59

Subject

CN=HUAWEI Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=HUAWEI Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:a4:41:33:dd:7c:56:5b:ca:2c:ac:17:41:61:a7:b8:53:4d:e8:d0
Signer

Actual PE Digest

11:a4:41:33:dd:7c:56:5b:ca:2c:ac:17:41:61:a7:b8:53:4d:e8:d0

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=HUAWEI Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=HUAWEI Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

17/07/2012, 09:20
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

core

_ZN11CommonUtils11GetSettingsE7QStringS0_
_ZN11CommonUtils14ThreadCountDecE7QStringS0_
_ZN11CommonUtils14ThreadCountIncE7QStringS0_
_ZN11CommonUtils15WaitThreadsStopEv
_ZN11CommonUtils16ExecuteSIPClientE7QString
_ZN11CommonUtils20GetPluginLibraryPathEv
_ZN7StartupC1Eb
_ZN7StartupD1Ev

sdk

UTPS_GetLogDirectory
UTPS_Shutdown
UTPS_Startup
_Z13UTPS_SDK_INITv
_Z15UTPS_SDK_UNINITv

kernel32

CloseHandle
CreateMutexA
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy

user32

GetDesktopWindow
GetPropA
GetWindow
IsWindow
SendMessageW

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

qtcore4

_Z15qAddPostRoutinePFvvE
_Z18qInstallMsgHandlerPFv9QtMsgTypePKcE
_Z5qFreePv
_Z6qDebugPKcz
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_Z9qCriticalPKcz
_ZN10QByteArray7reallocEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication14addLibraryPathERK7QString
_ZN16QCoreApplication18setApplicationNameERK7QString
_ZN16QCoreApplication19applicationFilePathEv
_ZN16QCoreApplication19setOrganizationNameERK7QString
_ZN16QCoreApplication21setOrganizationDomainERK7QString
_ZN16QCoreApplication9argumentsEv
_ZN4QDir10setCurrentERK7QString
_ZN5QTime11currentTimeEv
_ZN5QTime5startEv
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexC1ENS_13RecursionModeE
_ZN6QMutexD1Ev
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString9fromAsciiEPKci
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZN7QThread15currentThreadIdEv
_ZNK5QTime7elapsedEv
_ZNK5QTime8toStringERK7QString
_ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString11toLocal8BitEv
_ZNK7QString5rightEi
_ZNK7QString5toIntEPbi
_ZNK7QString5utf16Ev
_ZNK7QString7toAsciiEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_

qtgui4

_ZN12QApplication13setWindowIconERK5QIcon
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN5QIconC1ERK7QString
_ZN5QIconD1Ev

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d8e1731fed3a7e621977394203b8ebdd

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

78:ea:45:6d:d0:a9:c3:b3:a0:dd:7b:d8:60:de:0b:55Certificate

Extended Key Usages

Key Usages

11:a4:41:33:dd:7c:56:5b:ca:2c:ac:17:41:61:a7:b8:53:4d:e8:d0Signer

Signature Validations

Verification

17/07/2012, 09:20 Valid: false

Headers

File Characteristics

Imports

core

sdk

kernel32

mingwm10

msvcrt

user32

libgcc_s_dw2-1

qtcore4

qtgui4

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 26KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 152B

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 576KB - Virtual size: 575KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

78:ea:45:6d:d0:a9:c3:b3:a0:dd:7b:d8:60:de:0b:55
Certificate

11:a4:41:33:dd:7c:56:5b:ca:2c:ac:17:41:61:a7:b8:53:4d:e8:d0
Signer

17/07/2012, 09:20
Valid: false

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 26KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 152B

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 576KB - Virtual size: 575KB