1939987d11762cbb146d0ffcd39df16e

Sharing

Copy URL

Twitter E-mail

General

Target

1939987d11762cbb146d0ffcd39df16e
Size

661KB
MD5

1939987d11762cbb146d0ffcd39df16e
SHA1

895059be4b58dcd1058fc1beca550f4a97b95d24
SHA256

20e4adcba0241e7edde0d6cbac0ca4a016ddeb20d27ed40eab393fccce540bef
SHA512

dd1bcd3404ff4aa9de9205a65a752ae9b019b02d8e760e18a2b322a97fad07005ecfbecb335b194e2771d708ba90d7097fffbdd94603e43dcff0ac691b6741bf
SSDEEP

6144:KNSS4HXfCBQWDrl8L/JMFPqH05qPITeoKD5tSxgH1Sw4na8Uyl7qTwOt5jTW9c5I:WSS4HaqqO/JM75HkR1dNBbSfTYRoB5T

Score

1^/10

Malware Config

Signatures

Files

1939987d11762cbb146d0ffcd39df16e
.exe windows:5 windows x86 arch:x86

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

90:ad:07:f1:69:75:8b:4d:6d:2e:51:21:24:a5:3b:57
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

29-05-2015 00:00

Not After

28-05-2016 23:59

Subject

CN=KATANA,O=KATANA,POSTALCODE=156002,STREET=44/7 ul.Ostrovskogo,L=Kostroma,ST=Kostroma region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8a:d7:6e:86:f8:8d:db:6d:b5:96:8b:cf:5b:b1:75:bb:e4:f1:3c:5b
Signer

Actual PE Digest

8a:d7:6e:86:f8:8d:db:6d:b5:96:8b:cf:5b:b1:75:bb:e4:f1:3c:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

90:ad:07:f1:69:75:8b:4d:6d:2e:51:21:24:a5:3b:57Certificate

Extended Key Usages

Key Usages

8a:d7:6e:86:f8:8d:db:6d:b5:96:8b:cf:5b:b1:75:bb:e4:f1:3c:5bSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 588KB - Virtual size: 587KB

.rsrc Size: 66KB - Virtual size: 66KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

90:ad:07:f1:69:75:8b:4d:6d:2e:51:21:24:a5:3b:57
Certificate

8a:d7:6e:86:f8:8d:db:6d:b5:96:8b:cf:5b:b1:75:bb:e4:f1:3c:5b
Signer

.text
Size: 588KB - Virtual size: 587KB

.rsrc
Size: 66KB - Virtual size: 66KB