CNET_261007[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CNET_261007.exe
Size

14KB
MD5

8110ecc689aacb923e8bde6dab0032dc
SHA1

3ada13fa1d24972da193e4441e92eeba5e4ff486
SHA256

824108bfbf3f4bba9aa6ad1fc5670e71ab14ff83a30ff56e921ca8550ae03fa4
SHA512

4b62c9156e37f7904cd21d8dea04861977c38c35a1cfa564b0cdb75a3c35e2579783f91fe3cfa7edc824eef8eacbd9d906973bba7d2a58b5579c8fcefedfacd5
SSDEEP

192:6LlHjeV1Q4Zhx0rYXIOI0wKreZ/OgMg2YD7uGauospvx4i7bjuPm:6LlHjQg2DIt2gDOi7iu

Score

1^/10

Malware Config

Signatures

Files

CNET_261007.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e8:da:48:d7:f1:9c:cd:2a:fa:ca:b6:f4:66:ff:aa:9a
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08/02/2016, 00:00

Not After

20/07/2016, 23:59

Subject

CN=Schmidt's LOGIN GmbH,OU=LOGINventory,O=Schmidt's LOGIN GmbH,POSTALCODE=81673,STREET=Streitfeldstr. 37,L=Muenchen,ST=BY,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ef:88:71:14:d8:4d:e0:2b:ce:2e:e3:85:3c:4b:e0:d6:f3:c0:d7:e5:9c:ef:89:60:3f:be:67:01:33:20:a8:51
Signer

Actual PE Digest

ef:88:71:14:d8:4d:e0:2b:ce:2e:e3:85:3c:4b:e0:d6:f3:c0:d7:e5:9c:ef:89:60:3f:be:67:01:33:20:a8:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e8:da:48:d7:f1:9c:cd:2a:fa:ca:b6:f4:66:ff:aa:9aCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

ef:88:71:14:d8:4d:e0:2b:ce:2e:e3:85:3c:4b:e0:d6:f3:c0:d7:e5:9c:ef:89:60:3f:be:67:01:33:20:a8:51Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 6KB - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

e8:da:48:d7:f1:9c:cd:2a:fa:ca:b6:f4:66:ff:aa:9a
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

ef:88:71:14:d8:4d:e0:2b:ce:2e:e3:85:3c:4b:e0:d6:f3:c0:d7:e5:9c:ef:89:60:3f:be:67:01:33:20:a8:51
Signer

.text
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B