de1182ef16fd548167fa0562569b65881fce9580db3328558e6060ff8db6f370[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

de1182ef16fd548167fa0562569b65881fce9580db3328558e6060ff8db6f370.exe.zip
Size

3.2MB
MD5

93e6a5c5f42f62b21dedf7b6fe5c701c
SHA1

fd4b0d5bec958e1a58f15e210412bca35fbf6020
SHA256

02c9297a7bf448912af71cb79018a67593b475424594718bd2f3fa397d4403a6
SHA512

bf7a6e13e56242750368023cefe7f082a6dba09e97eb7b7283044a5600340b87202989161f7d69efeb306b0d70d653ab26742fe7b7f2fe22e36c2778f4e955f6
SSDEEP

49152:q3prKJ96OX+Yylln5RAgZTEDKlaNa1magoLxMpLNgfV9XvLkT24RvTqEoX7DRTq3:q3hKb6e+BljNEIaqnXILutcqEoXnR23

Score

1^/10

Malware Config

Signatures

Files

de1182ef16fd548167fa0562569b65881fce9580db3328558e6060ff8db6f370.exe.zip
.zip

Password: infected
de1182ef16fd548167fa0562569b65881fce9580db3328558e6060ff8db6f370.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ad:18:6b:59:c2:a0:9a:3d:d7:b6:2b:b4:a4:7d:af:dd
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

30/08/2016, 00:00

Not After

30/08/2020, 23:59

Subject

CN=Totalidea Software GmbH,O=Totalidea Software GmbH,POSTALCODE=42897,STREET=Julius-Pluecker-Straße 5,L=Remscheid,ST=NRW,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:90:6d:d2:20:07:37:88:31:b8:36:68:e8:ad:b4:93:cd:ea:91:24:5c:45:23:d8:ce:53:e5:8c:85:99:4b:c1
Signer

Actual PE Digest

38:90:6d:d2:20:07:37:88:31:b8:36:68:e8:ad:b4:93:cd:ea:91:24:5c:45:23:d8:ce:53:e5:8c:85:99:4b:c1

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

ad:18:6b:59:c2:a0:9a:3d:d7:b6:2b:b4:a4:7d:af:ddCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

38:90:6d:d2:20:07:37:88:31:b8:36:68:e8:ad:b4:93:cd:ea:91:24:5c:45:23:d8:ce:53:e5:8c:85:99:4b:c1Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rsrc Size: 186KB - Virtual size: 185KB

.reloc Size: 512B - Virtual size: 12B

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

ad:18:6b:59:c2:a0:9a:3d:d7:b6:2b:b4:a4:7d:af:dd
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

38:90:6d:d2:20:07:37:88:31:b8:36:68:e8:ad:b4:93:cd:ea:91:24:5c:45:23:d8:ce:53:e5:8c:85:99:4b:c1
Signer

.text
Size: 3.2MB - Virtual size: 3.2MB

.rsrc
Size: 186KB - Virtual size: 185KB

.reloc
Size: 512B - Virtual size: 12B