Latitude_5X90_1[.]2[.]3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Latitude_5X90_1.2.3.exe
Size

10.1MB
MD5

219f7fc295f330d59389440ffd67b899
SHA1

80594856ba78af250a9e878b8dd4441115f16da6
SHA256

3fa97a739f39e842e1520bdf7548b1cf3f39232fce53d77c5e108a7eeab9c4db
SHA512

397bbda236ded8af77dee1d09c880535a32d6b16901959609c3a4eca8beabae34ac82b62021c795030cbe857a326712dd381b07f78872fffe2861a4c67a72f4a
SSDEEP

196608:4d8EKIwLniVF+dTPjmn1LMnd5RquQ/jsKngq8am8NvJOn1SJBTS2oXFDn+730/Ia:4dXKPVFKdMd5TQ/JnxhvknAJBTaXQ0wa

Score

1^/10

Malware Config

Signatures

Files

Latitude_5X90_1.2.3.exe
.exe windows:5 windows x86

cc5cf54b23c6e16912b9812bae738617

Code Sign

73:66:95:ef:be:bf:cb:63:00:00:00:00:55:66:5b:98
Certificate

Issuer

CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

16/03/2018, 17:58

Not After

16/03/2019, 18:28

Subject

CN=Dell Inc,O=Dell Inc,L=Round Rock,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:c1:0b:1c:00:00:00:00:51:d3:73:da
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:46

Not After

10/11/2030, 14:16

Subject

CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

13:46:0b:f3:8c:57:42:20:00:00:00:00:55:91:c4:09
Certificate

Issuer

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

09/11/2017, 17:41

Not After

09/02/2029, 18:11

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

22/07/2015, 19:02

Not After

22/06/2029, 19:32

Subject

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:ae:b6:04:ab:d8:fe:3b:c8:94:ce:d8:d1:4c:92:e2:99:ee:a4:51:52:86:e6:9a:f6:68:b3:20:59:18:37:eb
Signer

Actual PE Digest

3a:ae:b6:04:ab:d8:fe:3b:c8:94:ce:d8:d1:4c:92:e2:99:ee:a4:51:52:86:e6:9a:f6:68:b3:20:59:18:37:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
MessageBoxW
SystemParametersInfoA
GetSystemMetrics
UpdateWindow
DialogBoxParamA
wsprintfA
RedrawWindow
ExitWindowsEx
MessageBoxA
EndPaint
DestroyWindow
RegisterClassExA
SendDlgItemMessageA
FillRect
GetClientRect
BeginPaint
SetWindowLongA
GetWindowLongA
CreateWindowExA
EndDialog
DefWindowProcA

gdi32

DeleteObject
CreateSolidBrush

advapi32

RegEnumKeyExA
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
DeleteService
CloseServiceHandle
FreeSid
AllocateAndInitializeSid
ReportEventA
DeregisterEventSource
RegisterEventSourceA
RegCreateKeyExA
RegSetValueExA
AdjustTokenPrivileges
RegOpenKeyA
LookupPrivilegeValueA
RegQueryValueExA
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenCurrentUser
RegQueryInfoKeyA
RegGetKeySecurity
RegOpenKeyExA

oleaut32

SafeArrayPutElement
SysStringLen
SysFreeString
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
VarBstrCat
VariantInit
SafeArrayCreateVector
LoadTypeLibEx
VariantClear

ole32

CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoUninitialize

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
LoadLibraryW
FlushFileBuffers
GetStringTypeW
WriteConsoleW
SetStdHandle
SetEndOfFile
GetProcessHeap
CreateFileW
GetCurrentThreadId
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
WriteFile
HeapCreate
LCMapStringW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
Sleep
OutputDebugStringA
GetCurrentProcess
GetLastError
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetUserDefaultUILanguage
GetTempPathA
WaitForSingleObject
FreeConsole
CreateDirectoryA
AttachConsole
GetLocalTime
OpenMutexA
ReleaseMutex
lstrlenA
GetVersionExA
GetExitCodeProcess
CreateProcessA
TerminateProcess
FindFirstFileA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
GetEnvironmentVariableA
DeviceIoControl
CreateFileA
lstrlenW
MultiByteToWideChar
SetEvent
WaitForMultipleObjects
CreateThread
CreateEventA
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
WideCharToMultiByte
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetModuleHandleW
ExitProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc5cf54b23c6e16912b9812bae738617

Code Sign

73:66:95:ef:be:bf:cb:63:00:00:00:00:55:66:5b:98Certificate

Extended Key Usages

Key Usages

43:c1:0b:1c:00:00:00:00:51:d3:73:daCertificate

Extended Key Usages

Key Usages

13:46:0b:f3:8c:57:42:20:00:00:00:00:55:91:c4:09Certificate

Extended Key Usages

Key Usages

58:da:13:ff:00:00:00:00:51:ce:0d:f7Certificate

Extended Key Usages

Key Usages

3a:ae:b6:04:ab:d8:fe:3b:c8:94:ce:d8:d1:4c:92:e2:99:ee:a4:51:52:86:e6:9a:f6:68:b3:20:59:18:37:ebSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

advapi32

oleaut32

ole32

kernel32

Sections

.text Size: 216KB - Virtual size: 216KB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 34KB - Virtual size: 307KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 14KB

73:66:95:ef:be:bf:cb:63:00:00:00:00:55:66:5b:98
Certificate

43:c1:0b:1c:00:00:00:00:51:d3:73:da
Certificate

13:46:0b:f3:8c:57:42:20:00:00:00:00:55:91:c4:09
Certificate

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

3a:ae:b6:04:ab:d8:fe:3b:c8:94:ce:d8:d1:4c:92:e2:99:ee:a4:51:52:86:e6:9a:f6:68:b3:20:59:18:37:eb
Signer

.text
Size: 216KB - Virtual size: 216KB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 34KB - Virtual size: 307KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 14KB