EasyAdBlocker[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

EasyAdBlocker.exe
Size

1.0MB
MD5

fd62a3510ff7da8ee3c376b4685b84aa
SHA1

eb45d25ea3d8d18f7b26fa161864961819b9fed7
SHA256

652102461417e05862d95b3fde78dd4fcebda3b3c9c19c25e8f089ada71404d1
SHA512

29af70fa67b9153be4da5be84d7c2390e6fe69d5134433eaff689e1ccb3e5bfcf609d6952b08d81a4dd6270c7925fbf69bc955aa05e90e585ddc6e740ec131ae
SSDEEP

12288:gnw4fnlc4t6iFN9kstg4sX4JJpT3yMI0GLrUK5W:wwGlcsBPqw3yMIxn5W

Score

1^/10

Malware Config

Signatures

Files

EasyAdBlocker.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:ee:94:73:24:ab:28:95:da:db:e5:5a:15:8e:76:bc
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

22/01/2023, 00:00

Not After

22/01/2024, 23:59

Subject

SERIALNUMBER=6466885000,CN=INNOVA MEDIA internetne storitve d.o.o.,O=INNOVA MEDIA internetne storitve d.o.o.,ST=Šempeter-Vrtojba,C=SI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025349

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:37:61:61:44:31:17:a5:df:74:ca:0b:23:b7:1d:18:c1:19:37:98:34:73:9d:90:df:e8:22:8d:e5:42:3c:e2
Signer

Actual PE Digest

42:37:61:61:44:31:17:a5:df:74:ca:0b:23:b7:1d:18:c1:19:37:98:34:73:9d:90:df:e8:22:8d:e5:42:3c:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 942KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

3d:ee:94:73:24:ab:28:95:da:db:e5:5a:15:8e:76:bcCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

42:37:61:61:44:31:17:a5:df:74:ca:0b:23:b7:1d:18:c1:19:37:98:34:73:9d:90:df:e8:22:8d:e5:42:3c:e2Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 942KB - Virtual size: 941KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

3d:ee:94:73:24:ab:28:95:da:db:e5:5a:15:8e:76:bc
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

42:37:61:61:44:31:17:a5:df:74:ca:0b:23:b7:1d:18:c1:19:37:98:34:73:9d:90:df:e8:22:8d:e5:42:3c:e2
Signer

.text
Size: 942KB - Virtual size: 941KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 512B - Virtual size: 12B