CNET_34900[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CNET_34900.exe
Size

1.2MB
MD5

abd935b58429695d1ee1729a69fd760c
SHA1

38794b5195fb917a0fdffc320c50c317a7462e39
SHA256

c9ffc3dba4c3ec1585afd421132c82aaf58a8f65eb73aeec2e07684bf9cf3f44
SHA512

4d40ec8c489ba5322dd5354fe9387220c15afe7c3b5e9debade4b6ef09cece772072cb724cce2d4e5b97b35abc27012af9c23ce3eed4c3910c054ce0ae72c71d
SSDEEP

6144:v/EgeqwC3tzxnjnuDb49MgeqwC3tzxnjnk:nEJqP9zx7uDWMJqP9zx7k

Score

1^/10

Malware Config

Signatures

Files

CNET_34900.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:8b:05:91:56:7c:41:c2:7f:37:cc:c6:af:9b:e0:90
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

16/09/2011, 00:00

Not After

08/12/2012, 23:59

Subject

CN=U-BTech Solutions LTD,OU=Development,O=U-BTech Solutions LTD,L=Ramat Hasharon,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

13:22:e3:de:a5:6b:4e:2a:77:51:64:d1:81:f6:48:e2:b2:94:74:74
Signer

Actual PE Digest

13:22:e3:de:a5:6b:4e:2a:77:51:64:d1:81:f6:48:e2:b2:94:74:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

37:8b:05:91:56:7c:41:c2:7f:37:cc:c6:af:9b:e0:90Certificate

Extended Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

13:22:e3:de:a5:6b:4e:2a:77:51:64:d1:81:f6:48:e2:b2:94:74:74Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 660KB - Virtual size: 659KB

.rsrc Size: 578KB - Virtual size: 577KB

.reloc Size: 512B - Virtual size: 12B

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

37:8b:05:91:56:7c:41:c2:7f:37:cc:c6:af:9b:e0:90
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

13:22:e3:de:a5:6b:4e:2a:77:51:64:d1:81:f6:48:e2:b2:94:74:74
Signer

.text
Size: 660KB - Virtual size: 659KB

.rsrc
Size: 578KB - Virtual size: 577KB

.reloc
Size: 512B - Virtual size: 12B