674a940a47a8f7cfff1f3da84d72e997

General

Target
674a940a47a8f7cfff1f3da84d72e997
Size 51KB
Sample231226-mhqcpaffe5
SHA256 2199fb902ed159259f7beb00a401d4942717c3648d873edc91f7b551f313dc67
MD5 674a940a47a8f7cfff1f3da84d72e997
SHA1 a8d46b13bd78aca7ee1f844a4171abb465e165c9
SHA512 472267360552ae7d1ea6a578d68ddb6f61a9376d175f479a36d97bb800dd080dd6e981266b98dc06473951ee9717b22ed57df7372c22c919ca487bffa2ef0b26
SSDEEP 768:RtkMoxL4I9TBJtqr9AVafBBZ2djcS3yCzEBYkv2QXs79jsc8H9:RtkMPejzMZD80/E9M9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

674a940a47a8f7cfff1f3da84d72e997

.sys 51KB

674a940a47a8f7cfff1f3da84d72e997

IMPHASH fa301b3bfc34af7c6e6d230ae1198494
SHA256 2199fb902ed159259f7beb00a401d4942717c3648d873edc91f7b551f313dc67
MD5 674a940a47a8f7cfff1f3da84d72e997
SHA1 a8d46b13bd78aca7ee1f844a4171abb465e165c9
SHA512 472267360552ae7d1ea6a578d68ddb6f61a9376d175f479a36d97bb800dd080dd6e981266b98dc06473951ee9717b22ed57df7372c22c919ca487bffa2ef0b26
SSDEEP 768:RtkMoxL4I9TBJtqr9AVafBBZ2djcS3yCzEBYkv2QXs79jsc8H9:RtkMPejzMZD80/E9M9
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

f0:91:24:a7:68:a0:8a:ae:54:a4:be:a9:50:c7:d5:62:2b:5b:60:c9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shopper-Pro (GOOBZO LTD),O=Shopper-Pro (GOOBZO LTD),POSTALCODE=31905,STREET=Bldg #15 Matam,L=Haifa,ST=Haifa,C=IL

Chains

Jun 15, 2015

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 24, 2011 - May 30, 2020

Subject

CN=Shopper-Pro (GOOBZO LTD),O=Shopper-Pro (GOOBZO LTD),POSTALCODE=31905,STREET=Bldg #15 Matam,L=Haifa,ST=Haifa,C=IL

Serial Number

e6:16:c6:cd:70:10:c1:97:e7:22:8f:66:f5:b2:86:bb

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2015 - Dec 31, 2015

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

33:00:00:00:36:7b:02:ea:cd:06:50:7a:73:00:00:00:00:00:36

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 15, 2013 - Aug 15, 2023

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 5, 2015 - Dec 31, 2015

Minor OS version

2

Major OS version

6

Entry point

37968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

728B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

674a940a47a8f7cfff1f3da84d72e997

PE Signature issue

ntoskrnl.exe

ndis.sys

fwpkclnt.sys

wdfldr.sys

generic

Sharing

General

Malware Config

Signatures

File Explorer

674a940a47a8f7cfff1f3da84d72e997

PE Signature issue

ntoskrnl.exe

ndis.sys

fwpkclnt.sys

wdfldr.sys

generic