5195cfac8b1aefbef93d57b46e9c6ed1

Sharing

Copy URL Twitter E-mail

General

Target

5195cfac8b1aefbef93d57b46e9c6ed1
Size

52KB
MD5

5195cfac8b1aefbef93d57b46e9c6ed1
SHA1

bd8602cb6649d3d975e35d5970d9ec3dbdaf3b1c
SHA256

e4d1aa210fd769b5184a9f4c01910882b954af4837ae4f2b76f78ea442167a2c
SHA512

4ddf5047e69d9001341adfcfdc5e0635eaa54dc601291ef2e393e6c74d53a9a45d58fa94e394f42a3b26e578de303dbaeef6855d2d458faa1ef61290453c5ff6
SSDEEP

768:PV2Q9VBrcvnRM2JKsMeuX4U7ie+QdvkmmMuVw+G/U5M5Bw+TvyIP3D3+OHkbL:9IRM5p94UlklMuV1hZqf730L

Score

1^/10

Malware Config

Signatures

Files

5195cfac8b1aefbef93d57b46e9c6ed1
.exe windows:4 windows x86 arch:x86

c5ba4324307b5a515c01627e08e66c84

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:b8:b3:fd:76:d9:eb:5f:f1:20:75:0c:88:c3:5a:0c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

09/06/2006, 00:00

Not After

11/07/2009, 23:59

Subject

CN=Cisco-Linksys LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=PD,O=Cisco-Linksys LLC,L=Irvine,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

89:96:8e:31:64:02:b1:4e:64:39:4a:1c:7e:da:63:f6:0f:2a:75:a8
Signer

Actual PE Digest

89:96:8e:31:64:02:b1:4e:64:39:4a:1c:7e:da:63:f6:0f:2a:75:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
CreateThread
DeleteFileA
FreeLibrary
GetLocaleInfoA
GetStartupInfoA
GetSystemDefaultLCID
GetThreadLocale
GetThreadPriority
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
ResumeThread
SetCurrentDirectoryA
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA

user32

AppendMenuW
CallWindowProcW
DestroyIcon
EnableWindow
EndPaint
GetActiveWindow
GetClientRect
GetDesktopWindow
GetFocus
GetLastActivePopup
GetMenuDefaultItem
GetShellWindow
GetWindowPlacement
IsDlgButtonChecked
IsRectEmpty
MessageBoxA
MessageBoxW
PostQuitMessage
PostThreadMessageW
PtInRect
SendMessageW
SetScrollInfo
UnregisterClassW
WindowFromPoint

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5ba4324307b5a515c01627e08e66c84

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

35:b8:b3:fd:76:d9:eb:5f:f1:20:75:0c:88:c3:5a:0cCertificate

Extended Key Usages

Key Usages

89:96:8e:31:64:02:b1:4e:64:39:4a:1c:7e:da:63:f6:0f:2a:75:a8Signer

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 16B

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

35:b8:b3:fd:76:d9:eb:5f:f1:20:75:0c:88:c3:5a:0c
Certificate

89:96:8e:31:64:02:b1:4e:64:39:4a:1c:7e:da:63:f6:0f:2a:75:a8
Signer

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 16B