fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe.zip
Size

931KB
MD5

83ccfc74dfd54adf0b2b55d261d397fe
SHA1

3a2bc11f314b701843d5205296ed26813df15493
SHA256

dfd3f4496509f47cbb01bd1b2dcdc99c93811e71694a1497478ef4e611f9ee6a
SHA512

769107098e7d8d8371d3f6f84e9d899ecd6d7eecbb07a33b3f2f011420bf5d9ce28f81284b7139dbf54ed8966d800033b68fe9587f603eb8a36ccf0a4602103a
SSDEEP

24576:moqj0fbr9597A0BNhkggSnoEiW0xn58Cb2iMmx2yCE2:moI0jzm0BNhkVSnAR5XK5CCE2

Score

1^/10

Malware Config

Signatures

Files

fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe.zip
.zip

Password: infected
fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27/04/2017, 00:00

Not After

27/04/2018, 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d
Signer

Actual PE Digest

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5dSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B