fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe.zip
Size

931KB
MD5

0d4c54baccb9f92323e7e1d9c90a1ab1
SHA1

c44b692614c2e2b0396eb1294cd5d947c6aefc36
SHA256

248277415ee20b683202cdfe9e0e28b41fac81a54e4a714aab9518cc95f67506
SHA512

04453d5b769cb71b8c4c62783044601b83f37ff3609ce7f6a28da6475ef562739955b7845c71f27f7995e3473c73fa2db9d135a74d8cfd3984dd2698a59f3fa5
SSDEEP

24576:wHXzjpHBG4mMYNhKAsUhfWSaRWzSb0t0lztdu1VRPz:KXHpxmUKzaR8Sb0WhtQPz

Score

1^/10

Malware Config

Signatures

Files

fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe.zip
.zip

Password: infected
fc1170fb348d39c7d19c1fa178ea9a2f928248a459de6ea4153129d89434d5d0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27/04/2017, 00:00

Not After

27/04/2018, 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d
Signer

Actual PE Digest

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5dSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

98:53:db:d4:9a:88:a5:27:37:98:ca:f4:92:4b:13:89
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c8:63:24:5b:c5:9a:2f:56:63:63:7b:ac:75:f2:53:20:51:67:98:cf:61:35:e5:36:91:59:9c:69:fa:f2:c1:5d
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B