15f546c7c5ca11ecc8d2cb28e0d6414f

Sharing

Copy URL

Twitter E-mail

General

Target

15f546c7c5ca11ecc8d2cb28e0d6414f
Size

678KB
MD5

15f546c7c5ca11ecc8d2cb28e0d6414f
SHA1

318070c1341918512bd23f01d911c763b6b98e25
SHA256

f6cec11fa49aa0e4e200e84bdbd8eef79345304cc6245fe98f713fda4aa30b65
SHA512

f244795ce1ceba2e0bbc8a9f191d906956e56332811604228b0d76aae24a3102a9376cf10b9780498c1bebfb237998ba1db7dc6fc315fb7cbac9027dd383e8f4
SSDEEP

12288:eRxIGFG/f5xC0X96dTDJ3ZLtciqoJB0Y2UjODSpd/oMk+F8qTdgb/5aaCoK:evI4GPC0Noh3Z5EyeUZwbDAdsBaaCoK

Score

1^/10

Malware Config

Signatures

Files

15f546c7c5ca11ecc8d2cb28e0d6414f
.exe windows:1 windows x86 arch:x86

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:44:66:c5:e6:31:d1:84:df:c5:74:ac:41:67:e0:7f:38
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

28-04-2015 15:48

Not After

28-04-2016 15:48

Subject

CN=Setup Cross (Fried Cookie Ltd),O=Setup Cross (Fried Cookie Ltd),L=Tel Aviv,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b0:a0:e1:e2:be:80:c5:cd:3c:d1:63:a0:b9:07:86:98:b8:45:c4:db
Signer

Actual PE Digest

b0:a0:e1:e2:be:80:c5:cd:3c:d1:63:a0:b9:07:86:98:b8:45:c4:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:44:66:c5:e6:31:d1:84:df:c5:74:ac:41:67:e0:7f:38Certificate

Extended Key Usages

Key Usages

b0:a0:e1:e2:be:80:c5:cd:3c:d1:63:a0:b9:07:86:98:b8:45:c4:dbSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 40KB - Virtual size: 39KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:44:66:c5:e6:31:d1:84:df:c5:74:ac:41:67:e0:7f:38
Certificate

b0:a0:e1:e2:be:80:c5:cd:3c:d1:63:a0:b9:07:86:98:b8:45:c4:db
Signer

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 40KB - Virtual size: 39KB