c81c0b1bcdd48a5620fafaecdfa9e505409008852884f486777ca2daf0832240

Sharing

Copy URL Twitter E-mail

General

Target

c81c0b1bcdd48a5620fafaecdfa9e505409008852884f486777ca2daf0832240
Size

14.7MB
MD5

691f73d95d3d3ac1e0208fbff95afdff
SHA1

3dfffcfcb8719d2f7c749aa40b80d4ba17476380
SHA256

c81c0b1bcdd48a5620fafaecdfa9e505409008852884f486777ca2daf0832240
SHA512

1e229a8d13df571e839672358f464f0201bf6c39b936b5dce91d37f5365dda0a6ff3986f3d0c8cffed68710286f5a962b62b8b18f6a1bef9aec6d5946fbcd056
SSDEEP

393216:yoyP+tj322JTJ7ivK0Fp+fYrkzW/mTQjnWKW7mVF:PW+tpJTZ4K0Fzg2OSXtF

Score

1^/10

Malware Config

Signatures

Files

c81c0b1bcdd48a5620fafaecdfa9e505409008852884f486777ca2daf0832240
.zip
fp1141.exe
.exe windows:4 windows x86

5ac6c45d71a2d585a6a5dbbb76b48df8

Code Sign

32:75:b3:e4:a2:12:20:d1:96:ec:ff:75:ed:ec:af:97
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

24/07/2021, 10:11

Not After

23/07/2024, 10:11

Subject

SERIALNUMBER=199911710082,CN=FinePrint Software\, LLC,O=FinePrint Software\, LLC,L=Menlo Park,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

56:b6:29:cd:34:bc:78:f6
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

31/05/2017, 18:14

Not After

30/05/2042, 18:14

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fc:2a:e5:3e:7e:64:4c:43:c5:64:b8:46:59:1b:42:ac:92:c3:e4:f6:83:07:26:e0:77:27:d0:4a:53:43:01:d2
Signer

Actual PE Digest

fc:2a:e5:3e:7e:64:4c:43:c5:64:b8:46:59:1b:42:ac:92:c3:e4:f6:83:07:26:e0:77:27:d0:4a:53:43:01:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
MoveFileExW
FindNextFileW
GetTickCount
WaitForSingleObject
GetLongPathNameW
GetTempPathW
FormatMessageW
CopyFileW
GetFileAttributesW
LoadLibraryExW
GetSystemDirectoryW
SetErrorMode
CreateFileA
ReadFile
SetFilePointer
LocalFree
CreateProcessW
GetSystemTime
WriteFile
GetVersionExW
GetVersion
GlobalMemoryStatus
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalHandle
GetCommandLineW
GlobalUnlock
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
VirtualAlloc
VirtualFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameW
GetLocalTime
GetWindowsDirectoryW
GetEnvironmentVariableW
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
Sleep
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
InitializeCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
CreateFileW
CloseHandle
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
CreateDirectoryW
GetVolumeInformationW
LocalAlloc
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetCurrentDirectoryW
FindFirstFileW
GetModuleHandleA
FindClose

gdi32

SetTextColor
SetTextAlign
GetBkColor
GetTextExtentPoint32W
ExtTextOutW
CreateDCW
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SelectObject
DeleteObject
SetBkColor

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
key.txt

Sharing

General

Malware Config

Signatures

Files

5ac6c45d71a2d585a6a5dbbb76b48df8

Code Sign

32:75:b3:e4:a2:12:20:d1:96:ec:ff:75:ed:ec:af:97Certificate

Extended Key Usages

Key Usages

56:b6:29:cd:34:bc:78:f6Certificate

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

fc:2a:e5:3e:7e:64:4c:43:c5:64:b8:46:59:1b:42:ac:92:c3:e4:f6:83:07:26:e0:77:27:d0:4a:53:43:01:d2Signer

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 152KB - Virtual size: 149KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 65KB

.rsrc Size: 392KB - Virtual size: 389KB

_winzip_ Size: 14.9MB - Virtual size: 14.9MB

32:75:b3:e4:a2:12:20:d1:96:ec:ff:75:ed:ec:af:97
Certificate

56:b6:29:cd:34:bc:78:f6
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

fc:2a:e5:3e:7e:64:4c:43:c5:64:b8:46:59:1b:42:ac:92:c3:e4:f6:83:07:26:e0:77:27:d0:4a:53:43:01:d2
Signer

.text
Size: 152KB - Virtual size: 149KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 65KB

.rsrc
Size: 392KB - Virtual size: 389KB

_winzip_
Size: 14.9MB - Virtual size: 14.9MB