5234747dcb0d8bf014c51d1898369078

Sharing

Copy URL Twitter E-mail

General

Target

5234747dcb0d8bf014c51d1898369078
Size

881KB
MD5

5234747dcb0d8bf014c51d1898369078
SHA1

92ab5e4ebbd3e6d3a632ce08666125a7bb878237
SHA256

0636bcda29bb4d1cca7ca8101c2e03be0097ad5584c17e88a047bc3ad7c3b247
SHA512

a7721002f93916396d8d19eaf95268f70dbb936a228889d3971e02cd97549305e29a65db05e1e05dc865923e9c879399b16a986c59c955368f6554875eae014f
SSDEEP

24576:G+OUttzk5eU8W4tCxpK4nL4vyiWQUllaNlN8NTJ:GnU9Ud4tI44nZHQUkc1

Score

1^/10

Malware Config

Signatures

Files

5234747dcb0d8bf014c51d1898369078
.exe windows:1 windows x86 arch:x86

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:16:70:94:d1:42:fb:72:a0:4b:99:b9:45:a2:5d:e3
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/03/2015, 00:00

Not After

28/03/2016, 12:00

Subject

CN=HALOMOT ITZHAK ltd,O=HALOMOT ITZHAK ltd,L=Modi'in-Maccabim-Re'ut,ST=israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:7f:b9:b9:bf:c1:6a:93:1f:14:f6:50:5d:ed:8b:ff:7b:50:1e:69
Signer

Actual PE Digest

42:7f:b9:b9:bf:c1:6a:93:1f:14:f6:50:5d:ed:8b:ff:7b:50:1e:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

01:16:70:94:d1:42:fb:72:a0:4b:99:b9:45:a2:5d:e3Certificate

Extended Key Usages

Key Usages

42:7f:b9:b9:bf:c1:6a:93:1f:14:f6:50:5d:ed:8b:ff:7b:50:1e:69Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 38KB - Virtual size: 37KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:16:70:94:d1:42:fb:72:a0:4b:99:b9:45:a2:5d:e3
Certificate

42:7f:b9:b9:bf:c1:6a:93:1f:14:f6:50:5d:ed:8b:ff:7b:50:1e:69
Signer

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 38KB - Virtual size: 37KB