d367c54be51caa4a4ff85a4f0416df25a149bcda4c85105f264664947c66098c[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

d367c54be51caa4a4ff85a4f0416df25a149bcda4c85105f264664947c66098c.exe.zip
Size

7.0MB
MD5

252acf0cb638b5618fd8fa2a27392d11
SHA1

097ac2e53c82d13ea042b6b5880587fe7daa86ca
SHA256

1653b245cbf7ceea5b25eb82a95b6998cb1b9e9b815dc897415de02ce7074382
SHA512

0f55da6c0ff0147a430a786fee1781acdef886592157b2136c78379c2761e74d2be456eac8ce2ed8a8d74a9828216f3458f91dccf89ceb6e37a8d6a8f5e26274
SSDEEP

98304:cZfHCvc4fnqayjQCsIJWQXdgkkBe4CydTByu+faqw0FMJ+xBCKGkSSC7cBvRxNek:ug0jQCsI4QXIB7CMww0CyBzGkndlT7

Score

1^/10

Malware Config

Signatures

Files

d367c54be51caa4a4ff85a4f0416df25a149bcda4c85105f264664947c66098c.exe.zip
.zip

Password: infected
d367c54be51caa4a4ff85a4f0416df25a149bcda4c85105f264664947c66098c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

c7:32:ae:b1:83:c8:51:2c:14:0e:b7:b2:e7:4f:d7:a4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

14/05/2016, 00:00

Not After

14/05/2017, 23:59

Subject

CN=RepairTech\, Inc.,O=RepairTech\, Inc.,POSTALCODE=95110,STREET=416 W. San Carlos St,L=San Jose,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3d:ab:3d:71:1e:15:38:2d:b2:8b:33:bd:30:cd:05:9c:3a:ff:97:3d
Signer

Actual PE Digest

3d:ab:3d:71:1e:15:38:2d:b2:8b:33:bd:30:cd:05:9c:3a:ff:97:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

c7:32:ae:b1:83:c8:51:2c:14:0e:b7:b2:e7:4f:d7:a4Certificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

3d:ab:3d:71:1e:15:38:2d:b2:8b:33:bd:30:cd:05:9c:3a:ff:97:3dSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 9.5MB - Virtual size: 9.5MB

.rsrc Size: 273KB - Virtual size: 273KB

.reloc Size: 512B - Virtual size: 12B

c7:32:ae:b1:83:c8:51:2c:14:0e:b7:b2:e7:4f:d7:a4
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

3d:ab:3d:71:1e:15:38:2d:b2:8b:33:bd:30:cd:05:9c:3a:ff:97:3d
Signer

.text
Size: 9.5MB - Virtual size: 9.5MB

.rsrc
Size: 273KB - Virtual size: 273KB

.reloc
Size: 512B - Virtual size: 12B