19bb7853d04404f5bab9988dd2ce774d

Sharing

Copy URL

Twitter E-mail

General

Target

19bb7853d04404f5bab9988dd2ce774d
Size

608KB
MD5

19bb7853d04404f5bab9988dd2ce774d
SHA1

ee988f64b84b82b2b61363dfd36e7bd098a0e677
SHA256

a3e66afa61864b9406499001456b8c49ced6edf8e6cd8d3a6a2aca27c1fd1293
SHA512

74218171fc9265f4e55953553e326e2db2d8485bbc29f3f5ec4d141830438893fb832b606d1fa396f1343a6c7c9637823592b85624d82a7bf184fadc6fe094b7
SSDEEP

12288:Q7blMnCQtlgeM8jw4KRlghS0I3/8nLSEZk/X67azlqqnHTEknjMxIoYlnlc:Q7blICag0jwbOS0y/8nOyk/X67aRq8IX

Score

1^/10

Malware Config

Signatures

Files

19bb7853d04404f5bab9988dd2ce774d
.exe windows:1 windows x86 arch:x86

Code Sign

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:c0:a6:de:7b:98:e2:78:1f:28:4c:7d:5a:f5:d6:34
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

01-08-2017 09:16

Not After

19-06-2018 08:08

Subject

CN=Open Source Developer\, Krzysztof Górnik,O=Open Source Developer,C=PL,1.2.840.113549.1.9.1=#0c106669726d61406e6574706c75732e706c

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a9:60:cd:82:4a:51:a4:8b:db:7a:cf:70:6b:de:5a:b9:76:6f:c7:7c
Signer

Actual PE Digest

a9:60:cd:82:4a:51:a4:8b:db:7a:cf:70:6b:de:5a:b9:76:6f:c7:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70Certificate

Extended Key Usages

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

4f:c0:a6:de:7b:98:e2:78:1f:28:4c:7d:5a:f5:d6:34Certificate

Extended Key Usages

Key Usages

a9:60:cd:82:4a:51:a4:8b:db:7a:cf:70:6b:de:5a:b9:76:6f:c7:7cSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 40KB - Virtual size: 40KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

4f:c0:a6:de:7b:98:e2:78:1f:28:4c:7d:5a:f5:d6:34
Certificate

a9:60:cd:82:4a:51:a4:8b:db:7a:cf:70:6b:de:5a:b9:76:6f:c7:7c
Signer

CODE
Size: 40KB - Virtual size: 40KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB