ECGStoreSCU[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ECGStoreSCU.exe
Size

17KB
MD5

2c9e5354fe91e0d1575e41d05c67d094
SHA1

adb513b14099983ae17f0a8575165e19f7cade39
SHA256

aea502857ab13379b971c95271fbd2ea281643c1462774fd0343509559004f0f
SHA512

949c47952c0b31a582b0849f18f91d5ab7f22a0c871155b4ff6fb26cbb8a7c967a5443977d03005cd11522e9b814ef016ab085e15c24aa51e850f48ef9b41860
SSDEEP

192:Xp6WzTHA0Pu3Nnn3YreAZ8jkMLXb1D5tTo5SlPFiKKtHcGcoPwTWTjtVkarb0hSF:XpnHA0PI9np9/+Wh6cGcoYYdrjwtI59j

Score

1^/10

Malware Config

Signatures

Files

ECGStoreSCU.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

23/08/2013, 00:00

Not After

23/09/2024, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:bf:fb:ba:6b:ab:b7:88:55:a5:f0:bd:a2:09:dd:ce:a0
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

02/09/2014, 16:25

Not After

10/10/2015, 12:45

Subject

CN=van Ettinger Information Technology,O=van Ettinger Information Technology,L=Lopik,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

db:a0:44:37:07:d4:21:fe:30:46:30:bf:22:29:0d:d6:36:90:bd:47
Signer

Actual PE Digest

db:a0:44:37:07:d4:21:fe:30:46:30:bf:22:29:0d:d6:36:90:bd:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:31:89:c6:37:e8Certificate

Extended Key Usages

Key Usages

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45Certificate

Extended Key Usages

Key Usages

11:21:bf:fb:ba:6b:ab:b7:88:55:a5:f0:bd:a2:09:dd:ce:a0Certificate

Extended Key Usages

Key Usages

db:a0:44:37:07:d4:21:fe:30:46:30:bf:22:29:0d:d6:36:90:bd:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 7KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

11:21:bf:fb:ba:6b:ab:b7:88:55:a5:f0:bd:a2:09:dd:ce:a0
Certificate

db:a0:44:37:07:d4:21:fe:30:46:30:bf:22:29:0d:d6:36:90:bd:47
Signer

.text
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B