0cacf5fd8bff84964fdaccceead86360_exe32_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0cacf5fd8bff84964fdaccceead86360_exe32_JC.exe
Size

307KB
MD5

0cacf5fd8bff84964fdaccceead86360
SHA1

9ff81eb36bdffb5b25069d69a1da444f3b5db92c
SHA256

7c0f7abad88df0ebf18897d543906d57fe39ff32a0c0b4131ae127c540a2ff6f
SHA512

a9aac60e2a9a9a6d798d3bb54ac04d4c4ea320e02a74d3f460929a79d5f33c5017695e18bfb2e493fa19e3006e9d1a0ddc861bff71a0e0f28df4553628db5c99
SSDEEP

6144:DPK/nHFP+nM/0N2r7KU0pwuvJJSLBf7xsabWpBL:D4nSsqUewuhyBTxsaqpBL

Score

1^/10

Malware Config

Signatures

Files

0cacf5fd8bff84964fdaccceead86360_exe32_JC.exe
.exe windows:5 windows x86

23348d0c4b58d38c85657a45f608fbb4

Code Sign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:fc:d6:b5:ee:b5:ae:c6:6d:02:22:b5:ca:18:50:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24/03/2014, 00:00

Not After

24/03/2015, 23:59

Subject

CN=System Applet,O=System Applet,POSTALCODE=64112,STREET=4600 Madison Ave\, 10th FL,L=Kansas City,ST=Missouri,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

79:79:c0:05:64:a7:d9:00:9c:b0:32:38:cd:47:96:d7:95:ac:f3:0f
Signer

Actual PE Digest

79:79:c0:05:64:a7:d9:00:9c:b0:32:38:cd:47:96:d7:95:ac:f3:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenW
LoadLibraryW
GetProcAddress
MulDiv
CompareStringW
CompareStringA
CreateFileA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
GetVersionExW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
GetLastError
HeapFree
LCMapStringA
LCMapStringW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
HeapSize
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
GetModuleHandleA

user32

GetDC
SystemParametersInfoW
ReleaseDC
EndDialog
LoadStringW
DialogBoxIndirectParamW

gdi32

GetDeviceCaps

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23348d0c4b58d38c85657a45f608fbb4

Code Sign

01Certificate

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

18:fc:d6:b5:ee:b5:ae:c6:6d:02:22:b5:ca:18:50:d9Certificate

Extended Key Usages

Key Usages

79:79:c0:05:64:a7:d9:00:9c:b0:32:38:cd:47:96:d7:95:ac:f3:0fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 230KB - Virtual size: 229KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 37KB - Virtual size: 36KB

01
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

18:fc:d6:b5:ee:b5:ae:c6:6d:02:22:b5:ca:18:50:d9
Certificate

79:79:c0:05:64:a7:d9:00:9c:b0:32:38:cd:47:96:d7:95:ac:f3:0f
Signer

.text
Size: 230KB - Virtual size: 229KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 37KB - Virtual size: 36KB