49[.]0[.]2623[.]75_chrome_installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

49.0.2623.75_chrome_installer.exe
Size

42.8MB
MD5

5bd34a050d2f357ce64e15912e9d8da6
SHA1

698471745a21d13311a59b56057ca43d89f3996b
SHA256

37f6c818188678c2e4eff0e0e84c58cbbe3b4c5f69b37ef3ee4b605d1d89a779
SHA512

d158feea4cfbd2ace0a08d4c3700ca93f2e5707a5be77f4129697f980f890c55003098a3a2010c10f741b72ee426ecdb4dbba72ff51b3bd776a2c762e44fcba0
SSDEEP

786432:c8gv5m6PvGw82R6DAdk5RqLFjAxb7QNoiM1+62hCpOoDjEdhV3wPD:+v5qt2NigFcxbf1+XC9/EdhNwr

Score

1^/10

Malware Config

Signatures

Files

49.0.2623.75_chrome_installer.exe
.exe windows x86

b780a4d1256fa1687db209e8b22b887b

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4c:40:db:a5:f9:88:fa:e5:7a:57:d6:45:74:95:f9:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

14/12/2015, 00:00

Not After

14/12/2016, 23:59

Subject

CN=Google Inc,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=Unknown issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

Extended Key Usages

Key Usages

KeyUsageCertSign

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16/12/2015, 00:00

Not After

16/12/2018, 23:59

Subject

CN=Google Inc,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cd:a1:50:50:f2:0c:54:03:75:a9:e3:41:bf:34:16:a5:55:3b:4a:38:2a:02:07:75:1b:3e:e4:d1:a5:66:00:e5
Signer

Actual PE Digest

cd:a1:50:50:f2:0c:54:03:75:a9:e3:41:bf:34:16:a5:55:3b:4a:38:2a:02:07:75:1b:3e:e4:d1:a5:66:00:e5

Digest Algorithm

sha256

PE Digest Matches

true

52:62:5c:12:12:88:7a:38:be:10:b6:f0:64:5f:7b:bf:2f:c7:6b:1e
Signer

Actual PE Digest

52:62:5c:12:12:88:7a:38:be:10:b6:f0:64:5f:7b:bf:2f:c7:6b:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction036
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

kernel32

LocalFree
LockResource
SizeofResource
LoadResource
FindResourceW
lstrcmpiW
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
GetLastError
CreateProcessW
RemoveDirectoryW
DeleteFileW
LocalAlloc
GetCurrentProcess
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
EnumResourceNamesW
GetVolumeInformationW
GetVolumePathNameW
CreateDirectoryW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
ExitProcess
GetModuleHandleW

shell32

CommandLineToArgvW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42.7MB - Virtual size: 42.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b780a4d1256fa1687db209e8b22b887b

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

4c:40:db:a5:f9:88:fa:e5:7a:57:d6:45:74:95:f9:8bCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

01Certificate

Extended Key Usages

Key Usages

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8dCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

cd:a1:50:50:f2:0c:54:03:75:a9:e3:41:bf:34:16:a5:55:3b:4a:38:2a:02:07:75:1b:3e:e4:d1:a5:66:00:e5Signer

52:62:5c:12:12:88:7a:38:be:10:b6:f0:64:5f:7b:bf:2f:c7:6b:1eSigner

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: - Virtual size: 16B

.rsrc Size: 42.7MB - Virtual size: 42.7MB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

4c:40:db:a5:f9:88:fa:e5:7a:57:d6:45:74:95:f9:8b
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

01
Certificate

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

cd:a1:50:50:f2:0c:54:03:75:a9:e3:41:bf:34:16:a5:55:3b:4a:38:2a:02:07:75:1b:3e:e4:d1:a5:66:00:e5
Signer

52:62:5c:12:12:88:7a:38:be:10:b6:f0:64:5f:7b:bf:2f:c7:6b:1e
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: - Virtual size: 16B

.rsrc
Size: 42.7MB - Virtual size: 42.7MB