colorcop-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

colorcop-setup.exe
Size

372KB
MD5

b00efe0590ef681281d578beab55f120
SHA1

357258e7af9c25111afdf815d7a449ca825922e2
SHA256

e2a55f4d3ac3b1a5574e3a008072dd59fd91ec3e6923ccb0c358e201ff7fd9b7
SHA512

be75720fb0ad9e4e7614452cd7348bdbf9d42709e01e867564a2c951676a3426e0272244c2b4ca5e495ff5c552a24e8bae6603c26c7757ae8f7ae892ed2b337f
SSDEEP

6144:wvmkOy5w+mi0xW6qb9K+2WQsplCzIRM9wh3670zHP0qc+eGxGDRM7BQTWngH7:ImkOy5wRi0o6qs+2xUUzIRIA6scqn0V1

Score

1^/10

Malware Config

Signatures

Files

colorcop-setup.exe
.exe windows:1 windows x86 arch:x86

Code Sign

0d
Certificate

Issuer

CN=Ascertia Root CA,O=Ascertia,C=GB

Not Before

10/03/2003, 07:56

Not After

30/07/2012, 10:42

Subject

CN=Ascertia CA 1,OU=Class 1 Certificate Authority,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:54:0b:3d:00:00:00:00:3a:ea
Certificate

Issuer

CN=Ascertia CA 1,OU=Class 1 Certificate Authority,O=Ascertia,C=GB

Not Before

17/09/2006, 03:31

Not After

17/09/2007, 03:41

Subject

CN=Jay Prall,OU=Software Development,L=Boston,ST=MA,C=US,1.2.840.113549.1.9.1=#0c126a61797072616c6c40676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment

41:f4:a4:83:d9:fd:5f:70:f1:c3:92:d9:86:c5:b3:ee:a6:90:a9:ae
Signer

Actual PE Digest

41:f4:a4:83:d9:fd:5f:70:f1:c3:92:d9:86:c5:b3:ee:a6:90:a9:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0dCertificate

Key Usages

44:54:0b:3d:00:00:00:00:3a:eaCertificate

Extended Key Usages

Key Usages

41:f4:a4:83:d9:fd:5f:70:f1:c3:92:d9:86:c5:b3:ee:a6:90:a9:aeSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 35KB

DATA Size: 1024B - Virtual size: 584B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 35KB - Virtual size: 34KB

0d
Certificate

44:54:0b:3d:00:00:00:00:3a:ea
Certificate

41:f4:a4:83:d9:fd:5f:70:f1:c3:92:d9:86:c5:b3:ee:a6:90:a9:ae
Signer

CODE
Size: 36KB - Virtual size: 35KB

DATA
Size: 1024B - Virtual size: 584B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 35KB - Virtual size: 34KB