HourglassPortable[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

HourglassPortable.exe
Size

985KB
MD5

94901c4774c4a1dc1b5fb18fe2d4dd41
SHA1

7b2eeec35f5c05ed14d318f472bc20815c7f716c
SHA256

969a71c80391067d22fdb59094e81c20dee111031daafedc53ec72f00a1c81a3
SHA512

a512e51f6a00de6d0028568e770a5fa23344c22157f32214c909bbf558992e21dccefb3415c3ab20edc900b9f2a9c0939f2780dd73b7c71b02cf3841afb554be
SSDEEP

12288:4Hv2R9jKie0hf2UpqhJtDtkcEfBBIhf2U5qhltPz:4Hy9jKieXUCxmcETLUUtz

Score

1^/10

Malware Config

Signatures

Files

HourglassPortable.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

05-05-2015 00:00

Not After

31-12-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:bf:00:01:72:5c:92:29:c5:cd:24:98:55:d8:cf:33
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16-07-2015 00:00

Not After

15-07-2018 23:59

Subject

CN=Krzysztof Dziemborowicz,O=Krzysztof Dziemborowicz,POSTALCODE=98052,STREET=16015 Cleveland St Apt 614,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:47:1c:78:6f:78:15:eb:ad:f9:27:72:46:03:2d:37:73:2c:39:ea
Signer

Actual PE Digest

17:47:1c:78:6f:78:15:eb:ad:f9:27:72:46:03:2d:37:73:2c:39:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6Certificate

Extended Key Usages

Key Usages

44:bf:00:01:72:5c:92:29:c5:cd:24:98:55:d8:cf:33Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

17:47:1c:78:6f:78:15:eb:ad:f9:27:72:46:03:2d:37:73:2c:39:eaSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 671KB - Virtual size: 670KB

.rsrc Size: 306KB - Virtual size: 306KB

.reloc Size: 512B - Virtual size: 12B

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

44:bf:00:01:72:5c:92:29:c5:cd:24:98:55:d8:cf:33
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

17:47:1c:78:6f:78:15:eb:ad:f9:27:72:46:03:2d:37:73:2c:39:ea
Signer

.text
Size: 671KB - Virtual size: 670KB

.rsrc
Size: 306KB - Virtual size: 306KB

.reloc
Size: 512B - Virtual size: 12B