SecuriteInfo[.]com[.]Trojan[.]RA[.]587[.]6199[.]17468

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.RA.587.6199.17468
Size

103KB
MD5

877f5e83fb39de16fa8bbd93ba9f07f1
SHA1

4ccc61ba1722484042734579dff6c1a97bd37366
SHA256

418744fa1ade539c280461387df87dda6bf84c7d755ebbbdc6123fd5659f9467
SHA512

e863e199267fe303e359339ee5b7b0888a2d17da6f56ac34cadda55f9d94a1297fa9f84b4dc9fdc6b6737a851c1352e655d96866543b6adc4b07cb708531b5cb
SSDEEP

384:Jh0wV5+6j6Qa86Fkv2Wr120hZE4vtV/CptVDikH:f/VZl6FhWr80/E4vtV6ptVDiy

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan.RA.587.6199.17468
.exe windows x86

a9d50692e95b79723f3e76fcf70d023e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

15/09/2017, 00:00

Not After

22/09/2020, 23:59

Subject

CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

15/09/2017, 00:00

Not After

22/09/2020, 23:59

Subject

CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c7:9b:de:4e:2d:93:7c:08:ea:6a:ea:d8:16:4a:28:a1:54:5a:31:dd:dc:d2:52:32:42:0f:05:96:fd:7d:c9:32
Signer

Actual PE Digest

c7:9b:de:4e:2d:93:7c:08:ea:6a:ea:d8:16:4a:28:a1:54:5a:31:dd:dc:d2:52:32:42:0f:05:96:fd:7d:c9:32

Digest Algorithm

sha256

PE Digest Matches

true

9a:cd:d5:43:90:e5:52:c1:51:62:2c:34:78:0e:d3:20:f6:6e:47:06
Signer

Actual PE Digest

9a:cd:d5:43:90:e5:52:c1:51:62:2c:34:78:0e:d3:20:f6:6e:47:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pcicl32

_NSMClient32@8

kernel32

GetCommandLineW
ExitProcess
GetModuleHandleW
GetStartupInfoW

Sections

.text
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9d50692e95b79723f3e76fcf70d023e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6dCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6dCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

c7:9b:de:4e:2d:93:7c:08:ea:6a:ea:d8:16:4a:28:a1:54:5a:31:dd:dc:d2:52:32:42:0f:05:96:fd:7d:c9:32Signer

9a:cd:d5:43:90:e5:52:c1:51:62:2c:34:78:0e:d3:20:f6:6e:47:06Signer

Headers

DLL Characteristics

File Characteristics

Imports

pcicl32

kernel32

Sections

.text Size: 512B - Virtual size: 194B

.rdata Size: 512B - Virtual size: 350B

.rsrc Size: 91KB - Virtual size: 90KB

.reloc Size: 512B - Virtual size: 108B

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

79:90:6f:af:4f:bd:75:ba:a1:0b:32:23:56:a0:7f:6d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

c7:9b:de:4e:2d:93:7c:08:ea:6a:ea:d8:16:4a:28:a1:54:5a:31:dd:dc:d2:52:32:42:0f:05:96:fd:7d:c9:32
Signer

9a:cd:d5:43:90:e5:52:c1:51:62:2c:34:78:0e:d3:20:f6:6e:47:06
Signer

.text
Size: 512B - Virtual size: 194B

.rdata
Size: 512B - Virtual size: 350B

.rsrc
Size: 91KB - Virtual size: 90KB

.reloc
Size: 512B - Virtual size: 108B