CNET_217181[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CNET_217181.exe
Size

14KB
MD5

866c0146c94d8406bf04d1b9c6a321e3
SHA1

4ad27dac0aa474ce8277714eb2e88e0473732884
SHA256

dbfe2a2ab3182ad04a160f9f2a4111cd55811d29537ca09ae09e957c50a3d242
SHA512

1913883345d0c0961fd74ee525ef61fe6a48cc9ae10ded3ca350ecfa6334d877fc326161e427d621b810f8c942f2f65249e4baf3ce33d1fb46ae9224b685332e
SSDEEP

192:ZW8V6k2a1+OnqrPd1JZ9idmy8+kzYcECYG8PZUE9C+cTwMr7bjunGp1:ZJh2+0PFmdmybkzYcEHG8PZZ2PinGp1

Score

1^/10

Malware Config

Signatures

Files

CNET_217181.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3a:8b:a9:ff:d8:f8:d3:90:bc:55:f2:2f:8b:96:d8:b1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

27/07/2018, 00:00

Not After

26/07/2021, 23:59

Subject

CN=Digiarty Software\, Inc.,OU=Software,O=Digiarty Software\, Inc.,L=Chengdu,ST=Sichuan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b7:22:15:d0:35:f0:db:70:9a:93:c5:9e:82:dc:a2:8e:6e:05:d9:85:41:b1:db:4a:18:ec:8b:d5:e6:0c:26:6d
Signer

Actual PE Digest

b7:22:15:d0:35:f0:db:70:9a:93:c5:9e:82:dc:a2:8e:6e:05:d9:85:41:b1:db:4a:18:ec:8b:d5:e6:0c:26:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3a:8b:a9:ff:d8:f8:d3:90:bc:55:f2:2f:8b:96:d8:b1Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

b7:22:15:d0:35:f0:db:70:9a:93:c5:9e:82:dc:a2:8e:6e:05:d9:85:41:b1:db:4a:18:ec:8b:d5:e6:0c:26:6dSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 12B

3a:8b:a9:ff:d8:f8:d3:90:bc:55:f2:2f:8b:96:d8:b1
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

b7:22:15:d0:35:f0:db:70:9a:93:c5:9e:82:dc:a2:8e:6e:05:d9:85:41:b1:db:4a:18:ec:8b:d5:e6:0c:26:6d
Signer

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 12B