CNET_25967[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CNET_25967.exe
Size

108KB
MD5

ac9507114d3778dae037e2d8125e469c
SHA1

f1d6575d9cee67814cdd15d9cd9d0efff9ee7dd7
SHA256

0b2265083076797167e6d2b9ceac6347a8ebcb0cfa26ce4518b3791953e04f1a
SHA512

af31e6d8836f580e5726ea23d48baf1d69c718c4a1742c87795cd5cffd8eca2c68cd7c5e6d13e0571dee8c44e301ae3154ebd0a8c46efcdc314588447bf3b8b2
SSDEEP

1536:1h0OoRUAaIt9hJcmbLzvAHN4g6C4zcKE5OZzJg+GxL/WDqVoLKyxRquHM3oGT+oR:ORUAag9hJcmb3qjaJg+sCgaFxWokbR

Score

1^/10

Malware Config

Signatures

Files

CNET_25967.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:85:ce:e1:62:c1:90:0d:de:c0:cf:12:46:9b:59:37
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/10/2007, 00:00

Not After

29/10/2008, 23:59

Subject

CN=Maksim Goleta,O=Maksim Goleta,POSTALCODE=98007,STREET=5043 148th AVE NE I-207,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:af:35:da:ed:60:86:63:98:20:d7:80:ff:f1:77:e6:da:23:00:bd
Signer

Actual PE Digest

05:af:35:da:ed:60:86:63:98:20:d7:80:ff:f1:77:e6:da:23:00:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:85:ce:e1:62:c1:90:0d:de:c0:cf:12:46:9b:59:37Certificate

Extended Key Usages

Key Usages

05:af:35:da:ed:60:86:63:98:20:d7:80:ff:f1:77:e6:da:23:00:bdSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 76KB - Virtual size: 73KB

.rsrc Size: 20KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 12B

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:85:ce:e1:62:c1:90:0d:de:c0:cf:12:46:9b:59:37
Certificate

05:af:35:da:ed:60:86:63:98:20:d7:80:ff:f1:77:e6:da:23:00:bd
Signer

.text
Size: 76KB - Virtual size: 73KB

.rsrc
Size: 20KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 12B