0ba3860cdf42940894058e51206a412c

Sharing

Copy URL Twitter E-mail

General

Target

0ba3860cdf42940894058e51206a412c
Size

963KB
MD5

0ba3860cdf42940894058e51206a412c
SHA1

0195248330a7c1b4e89ddc3274ea19b5e943930f
SHA256

e3764d790d00825f5ba7ea14f04fdecb8af9a8266b112a8325f910bb288da2e4
SHA512

43a2a1b5287192385e4ca47763d42d5edcdf9f26dcdf495db4efb48d4ba2cf686c1ae7ce73fb7398a5e8e825a091bb09c42a01c782a29028adc53e2966b300ec
SSDEEP

12288:npkXh4uk4MXD4TRKmisBgl1fmJb6y8Po+dJlvdwN6k9zlMnyEG6:pk2fM1K1l1ugyGMN6yzlMn/

Score

1^/10

Malware Config

Signatures

Files

0ba3860cdf42940894058e51206a412c
.exe windows:4 windows x86 arch:x86

6a0dbd064466451319c608490c8a9ebb

Code Sign

33:00:00:c1:09:9d:64:be:0c:43:ea:e2:05:00:02:00:00:c1:09
Certificate

Issuer

CN=Intel External Basic Issuing CA 3B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Not Before

20/10/2017, 06:55

Not After

08/02/2018, 22:31

Subject

CN=Intel(R) pGFX,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:2c:ff:88:00:01:00:00:00:10
Certificate

Issuer

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Not Before

08/02/2013, 22:21

Not After

08/02/2018, 22:31

Subject

CN=Intel External Basic Issuing CA 3B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:17:4a:a9:14:17:36:fe:15:a7:ca:9f:2c:ff:45:88
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

01/02/2013, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Intel External Basic Policy CA,O=Intel Corporation,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf
Certificate

Issuer

CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

Not Before

30/05/2014, 16:35

Not After

17/03/2021, 18:33

Subject

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75
Certificate

Issuer

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Not Before

24/04/2015, 21:44

Not After

24/04/2018, 21:44

Subject

CN=timestamp.intel.com,OU=Thales TSS ESN:E892-D055-162F+OU=Thales TSS ESN:E892-D055-162F,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

90:21:b9:e9:ef:60:b4:35:b0:93:bd:75:4b:fd:a6:14:90:0b:72:72:7a:32:75:b1:b9:ca:02:90:44:45:9e:f6
Signer

Actual PE Digest

90:21:b9:e9:ef:60:b4:35:b0:93:bd:75:4b:fd:a6:14:90:0b:72:72:7a:32:75:b1:b9:ca:02:90:44:45:9e:f6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

bind

setupapi

SetupDiGetDeviceInterfaceDetailW

bthprops.cpl

BluetoothAuthenticateDevice

kernel32

HeapCreate

user32

PostMessageW

advapi32

RegCreateKeyExW

shell32

SHGetFolderPathW

ole32

CoUninitialize

oleaut32

SafeArrayGetUBound

shlwapi

PathAppendW

Sections

.text
Size: 748KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a0dbd064466451319c608490c8a9ebb

Code Sign

33:00:00:c1:09:9d:64:be:0c:43:ea:e2:05:00:02:00:00:c1:09Certificate

Extended Key Usages

Key Usages

61:2c:ff:88:00:01:00:00:00:10Certificate

Key Usages

79:17:4a:a9:14:17:36:fe:15:a7:ca:9f:2c:ff:45:88Certificate

Extended Key Usages

Key Usages

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35Certificate

Extended Key Usages

Key Usages

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bfCertificate

Key Usages

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75Certificate

Extended Key Usages

Key Usages

90:21:b9:e9:ef:60:b4:35:b0:93:bd:75:4b:fd:a6:14:90:0b:72:72:7a:32:75:b1:b9:ca:02:90:44:45:9e:f6Signer

Headers

File Characteristics

Imports

ws2_32

setupapi

bthprops.cpl

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 748KB - Virtual size: 748KB

.rdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 196KB - Virtual size: 193KB

33:00:00:c1:09:9d:64:be:0c:43:ea:e2:05:00:02:00:00:c1:09
Certificate

61:2c:ff:88:00:01:00:00:00:10
Certificate

79:17:4a:a9:14:17:36:fe:15:a7:ca:9f:2c:ff:45:88
Certificate

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf
Certificate

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75
Certificate

90:21:b9:e9:ef:60:b4:35:b0:93:bd:75:4b:fd:a6:14:90:0b:72:72:7a:32:75:b1:b9:ca:02:90:44:45:9e:f6
Signer

.text
Size: 748KB - Virtual size: 748KB

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 196KB - Virtual size: 193KB